blob: 70bfbb46a3732061800a169bccc47c2d1e69e2e7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
--TEST--
Bug #25378 (unserialize() crashes with invalid data)
--FILE--
<?php
var_dump(unserialize("s:-1:\"\";"));
var_dump(unserialize("i:823"));
var_dump(unserialize("O:8:\"stdClass :0:{}"));
var_dump(unserialize("O:8:\"stdClass\"+0:{}"));
var_dump(unserialize("O:1000:\"stdClass\":0:{}"));
var_dump(unserialize("a:2:{i:0;s:2:\"12\":"));
var_dump(unserialize("a:2:{i:0;s:2:\"12\";i:1;s:3000:\"123"));
var_dump(unserialize("a:2:{i:0;s:2:\"12\"+i:1;s:3:\"123\";}"));
var_dump(unserialize("a:2:{i:0;s:2:\"12\";i:1;s:3:\"123\";"));
var_dump(unserialize("s:3000:\"123\";"));
var_dump(unserialize("s:3000:\"123"));
var_dump(unserialize("s:3:\"123;"));
var_dump(unserialize("s:0:\"123\";"));
?>
===DONE===
--EXPECTF--
Notice: unserialize(): Error at offset 0 of 8 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 0 of 5 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 13 of 19 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 14 of 19 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 2 of 22 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 17 of 18 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 24 of 33 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 17 of 33 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 32 of 32 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 2 of 13 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 2 of 11 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 8 of 9 bytes in %sbug25378.php on line %d
bool(false)
Notice: unserialize(): Error at offset 5 of 10 bytes in %sbug25378.php on line %d
bool(false)
===DONE===
|
