PHP ftainted Examples

Example #1

File: test_partial_references.php Project: NetPainter/aspis

function funtainted2()
{
    $o = new cluntainted();
    $s = "started";
    $i = 12;
    ftainted($o, $s, $i);
    ftainted($o, $s, $i);
    return $o;
}

Example #2

File: test_partial_untainted.php Project: NetPainter/aspis

function funtainted()
{
    echo "# argc is: ";
    //echo $GLOBALS["argc"];
    $GLOBALS["argc"] = 33;
    echo $GLOBALS["argc"];
    $_POST["argc"]["you"] = 12;
    echo $_POST["argc"]["you"];
    echo "\n";
    global $gl;
    echo "global \$gl is:" . $gl * 22 . "\n";
    ftainted();
    echo "global \$gl is:" . $gl * 33 . "\n";
}

Example #3

File: test_partial_libcalls.php Project: NetPainter/aspis

    $ar1 = array(1, 2, 3, 4);
    $ar2 = array(5, 6, 7, 8);
    $ar = array_merge($ar1, $ar2);
    print_r($ar);
    usort($ar, "cmp");
    print_r($ar);
    $ar = array_merge($ar1, $ar2);
    $o = new cuntainted();
    usort($ar, array($o, "cmp"));
    print_r($ar);
    $ar = array_merge($ar1, $ar2);
    $o = new ctainted();
    usort($ar, array($o, "cmp"));
    print_r($ar);
}
ftainted();
funtainted();
/////////////array walk/call_user_func/call_user_func_array//////////////
function funtaa($v, $i, $d)
{
    $r = $i * $v + $d;
    echo "value:{$r}\n";
}
function ftaa($v, $i, $d)
{
    $r = $i * $v + $d;
    echo "value:{$r}\n";
}
function funtaw()
{
    $array = array(1, 2, 3, 4, 5);