php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-03-24 08:12:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'PHP-8.4'

Browse Source 
* PHP-8.4:
  Leak in failed unserialize() with opcache
This commit is contained in:
Ilija Tovilo
2025-07-22 15:44:24 +02:00
parent ef5ca80a47 f0baf3dc11
commit 5b05d429f2
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
ext/standard/tests/serialize/oss_fuzz_433303828.phpt Normal file
View File

@@ -0,0 +1,13 @@
--TEST--
OSS-Fuzz #433303828
--FILE--
<?php
unserialize('O:2:"yy": ');
unserialize('O:2:"yy":: ');
?>
--EXPECTF--
Warning: unserialize(): Error at offset 9 of 10 bytes in %s on line %d
Warning: unserialize(): Error at offset 10 of 11 bytes in %s on line %d

2
ext/standard/var_unserializer.re
View File

@@ -1312,10 +1312,12 @@ object ":" uiv ":" ["] {
YYCURSOR = *p;
if (*(YYCURSOR) != ':') {
zend_string_release_ex(class_name, 0);
return 0;
}
if (*(YYCURSOR+1) != '{') {
*p = YYCURSOR+1;
zend_string_release_ex(class_name, 0);
return 0;
}