File tree 2 files changed +2
-4
lines changed
ext/standard/tests/serialize 2 files changed +2
-4
lines changed Original file line number Diff line number Diff line change @@ -21,7 +21,7 @@ PHP NEWS
21
21
non-blocking). (Nikita)
22
22
23
23
- GMP:
24
- . Fixed bug #76470 (Integer Underflow when unserializing GMP and possible
24
+ . Fixed bug #74670 (Integer Underflow when unserializing GMP and possible
25
25
other classes). (Nikita)
26
26
27
27
- intl:
Original file line number Diff line number Diff line change @@ -25,7 +25,7 @@ $fakezval .= "\x01";
25
25
$ fakezval .= "\x00" ;
26
26
$ fakezval .= "\x00\x00" ;
27
27
28
- $ inner = 'C:3:"obj":3:{ryat ' ;
28
+ $ inner = 'C:3:"obj":3:{rya} ' ;
29
29
$ exploit = 'a:4:{i:0;i:1;i:1;C:3:"obj": ' .strlen ($ inner ).':{ ' .$ inner .'}i:2;s: ' .strlen ($ fakezval ).':" ' .$ fakezval .'";i:3;R:5;} ' ;
30
30
31
31
$ data = unserialize ($ exploit );
48
48
--EXPECTF--
49
49
Notice: unserialize(): Error at offset 0 of 3 bytes in %sbug70436.php on line %d
50
50
51
- Notice: unserialize(): Error at offset 16 of 17 bytes in %sbug70436.php on line %d
52
-
53
51
Notice: unserialize(): Error at offset 93 of 94 bytes in %sbug70436.php on line %d
54
52
bool(false)
55
53
DONE
You can’t perform that action at this time.
0 commit comments