mirror of
https://github.com/php/php-src.git
synced 2026-04-26 17:38:14 +02:00
Nikita Popov
19 lines
300 B
PHP
19 lines
300 B
PHP
--TEST--
|
|
Bug #72731: Type Confusion in Object Deserialization
|
|
--FILE--
|
|
<?php
|
|
|
|
class obj {
|
|
var $ryat;
|
|
function __wakeup() {
|
|
$this->ryat = 0x1122334455;
|
|
}
|
|
}
|
|
|
|
$poc = 'O:8:"stdClass":1:{i:0;O:3:"obj":1:{s:4:"ryat";R:1;}}';
|
|
var_dump(unserialize($poc));
|
|
|
|
?>
|
|
--EXPECTF--
|
|
%s(73588229205)
|