Skip to content

Commit 3a236d0

Browse files
committed
Merge branch 'PHP-7.1' into PHP-7.2
2 parents 09bb252 + 787593b commit 3a236d0

File tree

2 files changed

+2
-4
lines changed

2 files changed

+2
-4
lines changed

NEWS

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ PHP NEWS
2121
non-blocking). (Nikita)
2222

2323
- GMP:
24-
. Fixed bug #76470 (Integer Underflow when unserializing GMP and possible
24+
. Fixed bug #74670 (Integer Underflow when unserializing GMP and possible
2525
other classes). (Nikita)
2626

2727
- intl:

ext/standard/tests/strings/bug70436.phpt renamed to ext/standard/tests/serialize/bug70436.phpt

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ $fakezval .= "\x01";
2525
$fakezval .= "\x00";
2626
$fakezval .= "\x00\x00";
2727

28-
$inner = 'C:3:"obj":3:{ryat';
28+
$inner = 'C:3:"obj":3:{rya}';
2929
$exploit = 'a:4:{i:0;i:1;i:1;C:3:"obj":'.strlen($inner).':{'.$inner.'}i:2;s:'.strlen($fakezval).':"'.$fakezval.'";i:3;R:5;}';
3030

3131
$data = unserialize($exploit);
@@ -48,8 +48,6 @@ DONE
4848
--EXPECTF--
4949
Notice: unserialize(): Error at offset 0 of 3 bytes in %sbug70436.php on line %d
5050

51-
Notice: unserialize(): Error at offset 16 of 17 bytes in %sbug70436.php on line %d
52-
5351
Notice: unserialize(): Error at offset 93 of 94 bytes in %sbug70436.php on line %d
5452
bool(false)
5553
DONE

0 commit comments

Comments
 (0)