mirror of
https://github.com/php/php-src.git
synced 2026-04-28 18:53:33 +02:00
Tim Düsterhus
dd8de1e726
* Unserialize: Migrate "Unexpected end of serialized data" to E_WARNING * Unserialize: Migrate "Error at offset %d of %d bytes" to E_WARNING * Unserialize: Migrate "%s is returned from __sleep() multiple times" to E_WARNING * Add NEWS for “Promote unserialize() notices to warning”
10 lines
316 B
PHP
10 lines
316 B
PHP
--TEST--
|
|
Bug #74103: heap-use-after-free when unserializing invalid array size
|
|
--FILE--
|
|
<?php
|
|
var_dump(unserialize('a:7:{i:0;i:04;s:1:"a";i:2;i:9617006;i:4;s:1:"a";i:4;s:1:"a";R:5;s:1:"7";R:3;s:1:"a";R:5;;s:18;}}'));
|
|
?>
|
|
--EXPECTF--
|
|
Warning: unserialize(): Error at offset 64 of 96 bytes in %s on line %d
|
|
bool(false)
|