mirror of
https://github.com/php/php-src.git
synced 2026-03-27 01:32:22 +01:00
0c450967e1
unserialize() returns false for these now, so it doesn't make sense to try and do something with the result.
11 lines
351 B
PHP
11 lines
351 B
PHP
--TEST--
|
|
Bug #72433: Use After Free Vulnerability in PHP's GC algorithm and unserialize
|
|
--FILE--
|
|
<?php
|
|
$serialized_payload = 'a:3:{i:0;r:1;i:1;r:1;i:2;C:11:"ArrayObject":19:{x:i:0;r:1;;m:a:0:{}}}';
|
|
var_dump(unserialize($serialized_payload));
|
|
?>
|
|
--EXPECTF--
|
|
Notice: unserialize(): Error at offset %d of %d bytes in %sbug72433.php on line 3
|
|
bool(false)
|