1
0
mirror of https://github.com/php/php-src.git synced 2026-04-02 13:43:02 +02:00
Files
archived-php-src/ext/session/tests
Máté Kocsis adb45a63c0 Fix GH-9186 @strict-properties can be bypassed using unserialization (#9354)
* Emit deprecation warnings when adding dynamic properties to classes during unserialization - this will become an Error in php 9.0.
  (Adding dynamic properties in other contexts was already a deprecation warning - the use case of unserialization was overlooked)
* Throw an error when attempting to add a dynamic property to a `readonly` class when unserializing
* Add new serialization methods `__serialize`/`__unserialize` for SplFixedArray to avoid creating deprecated dynamic
  properties that would then be added to the backing fixed-size array
* Don't add named dynamic/declared properties (e.g. $obj->foo) of SplFixedArray to the backing array when unserializing
* Update tests to declare properties or to expect the deprecation warning
* Add news entry

Co-authored-by: Tyson Andre <tysonandre775@hotmail.com>
2022-08-30 07:46:32 -04:00
..
2021-11-26 14:10:11 +01:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 11:57:42 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-06-11 16:27:50 +02:00
2021-07-30 16:13:05 +02:00
2020-02-03 22:52:20 +01:00
2021-06-11 16:27:50 +02:00