mirror of
https://github.com/php/php-src.git
synced 2026-04-14 11:32:11 +02:00
c793885b76
Validate that "C" serialization payload is followed by "}" prior to calling the unserialize() handler. This mitigates issues caused by unserialize() not correctly handling strings that are not NUL terminated. Making sure that there is a "}" at the end avoids the problem.
Arbitrary length number support with GNU MP library. Please see the PGP manual for more documentation. See also GNU MP home page at http://www.swox.com/gmp/. GNU MP library is available under the tems of GNU LGPL license. Please see http://www.swox.com/gmp/lgpl.html