From b3ea6ce720b3811e0c98ba4bdcf9107553d8967a Mon Sep 17 00:00:00 2001 From: Nikita Popov Date: Tue, 21 Jul 2020 11:53:00 +0200 Subject: Make ReflectionGenerator final This class is not safe against malicious extension / instantiation. --- ext/reflection/php_reflection.c | 1 + 1 file changed, 1 insertion(+) (limited to 'ext/reflection/php_reflection.c') diff --git a/ext/reflection/php_reflection.c b/ext/reflection/php_reflection.c index c751da1281..15237b3511 100644 --- a/ext/reflection/php_reflection.c +++ b/ext/reflection/php_reflection.c @@ -6506,6 +6506,7 @@ PHP_MINIT_FUNCTION(reflection) /* {{{ */ INIT_CLASS_ENTRY(_reflection_entry, "ReflectionGenerator", class_ReflectionGenerator_methods); reflection_init_class_handlers(&_reflection_entry); reflection_generator_ptr = zend_register_internal_class(&_reflection_entry); + reflection_generator_ptr->ce_flags |= ZEND_ACC_FINAL; INIT_CLASS_ENTRY(_reflection_entry, "ReflectionParameter", class_ReflectionParameter_methods); reflection_init_class_handlers(&_reflection_entry); -- cgit v1.2.1