diff options
| author | Stefan Esser <sesser@php.net> | 2005-02-28 16:22:39 +0000 |
|---|---|---|
| committer | Stefan Esser <sesser@php.net> | 2005-02-28 16:22:39 +0000 |
| commit | b7476a5bd6f7032a1333ef1a56a2e945c64adab5 (patch) | |
| tree | da72a29b03001ebe0a4d12dcbdcc8c1bdecaa906 | |
| parent | bc1c0c2e128ccaf24b0f7200fe04d5d7fe7b23fa (diff) | |
| download | php-git-b7476a5bd6f7032a1333ef1a56a2e945c64adab5.tar.gz | |
Drop invalid arrays
| -rw-r--r-- | ext/standard/var_unserializer.re | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ext/standard/var_unserializer.re b/ext/standard/var_unserializer.re index 613dd32c6f..a774946d91 100644 --- a/ext/standard/var_unserializer.re +++ b/ext/standard/var_unserializer.re @@ -477,6 +477,10 @@ PHPAPI int php_var_unserialize(UNSERIALIZE_PARAMETER) "a:" uiv ":" "{" { int elements = parse_iv(start + 2); + if (elements < 0) { + return 0; + } + *p = YYCURSOR; INIT_PZVAL(*rval); |