mirror of
https://github.com/php/php-src.git
synced 2026-04-19 14:01:01 +02:00
16 lines
299 B
PHP
16 lines
299 B
PHP
--TEST--
|
|
Bug #73147: Use After Free in PHP7 unserialize()
|
|
--EXTENSIONS--
|
|
curl
|
|
--FILE--
|
|
<?php
|
|
$poc = 'a:1:{i:0;O:8:"CURLFile":1:{s:4:"name";R:1;}}';
|
|
try {
|
|
var_dump(unserialize($poc));
|
|
} catch(Exception $e) {
|
|
echo $e->getMessage();
|
|
}
|
|
?>
|
|
--EXPECT--
|
|
Unserialization of 'CURLFile' is not allowed
|