laruence / taint

Taint is a PHP extension, used for detecting XSS codes

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

taint.c

guitarfeng opened this issue · comments

commented

在 php_assign_handler() php_assign_ref_handler()两个函数里面,处理OP2的时候,都出现了TAINT_CV_DEF_OF(TAINT_OP1_VAR(opline)). [LINE 1932, LINE2009]
应该是TAINT_CV_DEF_OF(TAINT_OP2_VAR(opline)).