diff options
Diffstat (limited to 'ext/standard/tests/serialize/bug73092.phpt')
| -rw-r--r-- | ext/standard/tests/serialize/bug73092.phpt | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/ext/standard/tests/serialize/bug73092.phpt b/ext/standard/tests/serialize/bug73092.phpt new file mode 100644 index 0000000000..451c532944 --- /dev/null +++ b/ext/standard/tests/serialize/bug73092.phpt @@ -0,0 +1,17 @@ +--TEST-- +Bug #73092: Unserialize use-after-free when resizing object's properties hash table +--FILE-- +<?php + +class foo { + function __wakeup() { + $this->{'x'} = 1; + } +} + +unserialize('a:3:{i:0;O:3:"foo":8:{i:0;i:0;i:1;i:1;i:2;i:2;i:3;i:3;i:4;i:4;i:5;i:5;i:6;i:6;i:7;i:7;}i:1;s:263:"'.str_repeat("\06", 263).'";i:2;r:3;}'); + +?> +===DONE=== +--EXPECT-- +===DONE=== |