facebook/hiphop-php — Issue #443: Class passed to simplexml_load_string is not used (POC inside)
Author: danslo
Created: 2011-12-13 21:02:22+00:00
State: open

Consider the following proof of concept:

', 'A');

var_dump(get_class($xml) == 'A');

Result:

daniel@home:~/Code/hiphop-php/src/hphpi$ ./hphpi -f poc.php
bool(false)
daniel@home:~/Code/hiphop-php/src/hphpi$ php poc.php
bool(true)

I will attempt to investigate this issue myself, and though I consider myself decently versed in C++, I wouldn't know where to start in HPHP's huge codebase. Any points/hinters would be very appreciated.