eaccelerator_dasm_file doesn't check for the open-basedir restriction. This could be a security issue, because users could possibly see the contents of files they shouldn't be able to view or even access. For example they could find out passwords of config-files just by looking at the opcodes.
I consider this trivial, since the disassembler is disabled by default and since it requires the permission to use eaccelerator_dasm_file, which should normally only be granted to site admins.
I guess, the check should be placed in ea_dasm.c above line #558. The fix seems to be quite simple. Maybe I'll add a patch to it myself if I find the time for it.
