Tim Düsterhus
f2e8c5da90
unserialize: Strictly check for :{ at object start ( #10214 )
...
* unserialize: Strictly check for `:{` at object start
* unserialize: Update CVE tests
It's unlikely that the object syntax error contributed to the actual CVE. The
CVE is rather caused by the incorrect object serialization data of the `C`
format. Add a second string without such a syntax error to ensure that path is
still executed as well to ensure the CVE is absent.
* Fix test expectation in gmp/tests/bug74670.phpt
No changes to the input required, because the test actually is intended to
verify the behavior for a missing `}`, it's just that the report position changed.
* NEWS
* UPGRADING
2023-01-12 19:55:54 +01:00
..
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2023-01-12 19:55:54 +01:00
2021-04-03 15:23:25 +02:00
2021-06-10 17:48:16 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-06-10 14:48:06 +02:00
2021-04-03 15:23:25 +02:00
2022-09-13 11:33:09 +01:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2022-12-23 16:29:14 +00:00
2021-04-03 15:23:25 +02:00
2021-05-31 15:48:45 +01:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-05-31 15:48:45 +01:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00
2021-06-10 14:48:06 +02:00
2022-08-30 07:46:32 -04:00
2021-04-03 15:23:25 +02:00
2021-04-03 15:23:25 +02:00