1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
--TEST--
The SensitiveParameter attribute handles nested function calls correctly.
--FILE--
<?php
function test(
#[SensitiveParameter] $sensitive1 = null,
$non_sensitive = null,
#[SensitiveParameter] $sensitive2 = null,
)
{
debug_print_backtrace();
var_dump(debug_backtrace());
var_dump((new Exception)->getTrace());
}
function wrapper(
$non_sensitive = null,
#[SensitiveParameter] $sensitive1 = null,
#[SensitiveParameter] $sensitive2 = null,
)
{
test($non_sensitive, $sensitive1, $sensitive2);
}
wrapper('foo', 'bar', 'baz');
?>
--EXPECTF--
#0 %ssensitive_parameter_nested_calls.php(20): test(Object(SensitiveParameterValue), 'bar', Object(SensitiveParameterValue))
#1 %ssensitive_parameter_nested_calls.php(23): wrapper('foo', Object(SensitiveParameterValue), Object(SensitiveParameterValue))
array(2) {
[0]=>
array(4) {
["file"]=>
string(%d) "%ssensitive_parameter_nested_calls.php"
["line"]=>
int(20)
["function"]=>
string(4) "test"
["args"]=>
array(3) {
[0]=>
object(SensitiveParameterValue)#%d (0) {
}
[1]=>
string(3) "bar"
[2]=>
object(SensitiveParameterValue)#%d (0) {
}
}
}
[1]=>
array(4) {
["file"]=>
string(%d) "%ssensitive_parameter_nested_calls.php"
["line"]=>
int(23)
["function"]=>
string(7) "wrapper"
["args"]=>
array(3) {
[0]=>
string(3) "foo"
[1]=>
object(SensitiveParameterValue)#%d (0) {
}
[2]=>
object(SensitiveParameterValue)#%d (0) {
}
}
}
}
array(2) {
[0]=>
array(4) {
["file"]=>
string(%d) "%ssensitive_parameter_nested_calls.php"
["line"]=>
int(20)
["function"]=>
string(4) "test"
["args"]=>
array(3) {
[0]=>
object(SensitiveParameterValue)#%d (0) {
}
[1]=>
string(3) "bar"
[2]=>
object(SensitiveParameterValue)#%d (0) {
}
}
}
[1]=>
array(4) {
["file"]=>
string(%d) "%ssensitive_parameter_nested_calls.php"
["line"]=>
int(23)
["function"]=>
string(7) "wrapper"
["args"]=>
array(3) {
[0]=>
string(3) "foo"
[1]=>
object(SensitiveParameterValue)#%d (0) {
}
[2]=>
object(SensitiveParameterValue)#%d (0) {
}
}
}
}
|
