Detect dynamic function calls #276

spaze · 2024-12-06T03:38:25Z

For example:

$sneaky = 'print_r';
$sneaky('foo');

and

('print_r')('foo');

Ref #275

For example: ```php $sneaky = 'print_r'; $sneaky('foo'); ``` and ```php ('print_r')('foo'); ```

Detect - `${'variable'}('foo')` dynamic function calls - `$object->$method()` and `$object->${'method'}()` - `Class::$method()` and `Class::${'method'}()` Ref #275 Follow-up to #276

Detect dynamic function calls

e7bfee5

For example: ```php $sneaky = 'print_r'; $sneaky('foo'); ``` and ```php ('print_r')('foo'); ```

spaze self-assigned this Dec 6, 2024

spaze merged commit 20fd804 into main Dec 6, 2024
124 checks passed

spaze deleted the spaze/dynamic-function-calls branch December 6, 2024 03:43

This was referenced Dec 6, 2024

False negatives when denied call used in: first class callable, dynamic call, anonymous class, array callable, ... #275

Open

More dynamic calls #278

Merged

spaze added a commit that referenced this pull request Dec 7, 2024

More dynamic calls (#278)

9e5b799

Detect - `${'variable'}('foo')` dynamic function calls - `$object->$method()` and `$object->${'method'}()` - `Class::$method()` and `Class::${'method'}()` Ref #275 Follow-up to #276

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Detect dynamic function calls #276

Detect dynamic function calls #276

spaze commented Dec 6, 2024

Detect dynamic function calls #276

Detect dynamic function calls #276

Conversation

spaze commented Dec 6, 2024