I have formatted the code as below.
`<?php
namespace nm\test;
$object1 = unserialize($_GET['object']);
?>`
The PHP version is 7.4.10. Zend Engine is v3.4.0。 I run the command "php -dextension=vld.so -dvld.active=1 -dvld.dump_paths=0 -dvld.execute=0 testcode.php" to review the opcode.
For INIT_NS_FCALL_BY_NAME, the fucntion name is shown as nm%5Ctest%5Cunserialize.
As API unserialize is a system API, it is not in name space nm\test. It is not correct to show system API with name space.
I have formatted the code as below. `<?php namespace nm\test;
$object1 = unserialize($_GET['object']); ?>`
The PHP version is 7.4.10. Zend Engine is v3.4.0。 I run the command "php -dextension=vld.so -dvld.active=1 -dvld.dump_paths=0 -dvld.execute=0 testcode.php" to review the opcode.
For INIT_NS_FCALL_BY_NAME, the fucntion name is shown as nm%5Ctest%5Cunserialize.
As API unserialize is a system API, it is not in name space nm\test. It is not correct to show system API with name space.