TYPO3 Core

// checking for 'dl()'
typo3/sysext/adodb/adodb/adodb-pear.inc.php:365: @dl($name . $dlext);
typo3/sysext/em/classes/parser/class.tx_em_parser_xmlabstractparser.php:77: if (!((bool) ini_get('enable_dl') && !(bool) ini_get('safe_mode') && function_exists('dl') && dl($prefix . $this->requiredPHPExt . PHP_SHLIB_SUFFIX))) {
typo3/sysext/openid/lib/php-openid/Auth/OpenID/BigMath.php:380: if (@dl($module . "." . PHP_SHLIB_SUFFIX)) {
typo3/sysext/openid/lib/php-openid/Auth/Yadis/XML.php:352: if (@dl($libname)) {

// checking for 'set_magic_quotes_runtime()'
typo3/contrib/swiftmailer/classes/Swift/ByteStream/FileByteStream.php:82: set_magic_quotes_runtime(0);
typo3/contrib/swiftmailer/classes/Swift/ByteStream/FileByteStream.php:87: set_magic_quotes_runtime(1);
typo3/contrib/swiftmailer/classes/Swift/KeyCache/DiskKeyCache.php:174: set_magic_quotes_runtime(0);
typo3/contrib/swiftmailer/classes/Swift/KeyCache/DiskKeyCache.php:183: set_magic_quotes_runtime(1);
typo3/contrib/swiftmailer/classes/Swift/KeyCache/DiskKeyCache.php:202: set_magic_quotes_runtime(0);
typo3/contrib/swiftmailer/classes/Swift/KeyCache/DiskKeyCache.php:210: set_magic_quotes_runtime(1);

The test script also gives false positives. It finds 'split()' in pieces of JS inside PHP files for example.
(issue imported from #M17542)