blob: d8be4638870479f2d05bfab163ec04fe582c8983 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
--TEST--
Bug #72663: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization
--FILE--
<?php
class obj {
var $ryat;
function __wakeup() {
$this->ryat = str_repeat('A', 0x112);
}
}
$poc = 'O:8:"stdClass":1:{i:0;O:3:"obj":1:{s:4:"ryat";R:1;';
unserialize($poc);
?>
DONE
--EXPECTF--
Notice: unserialize(): Error at offset 50 of 50 bytes in %sbug72663_3.php on line %d
DONE
|
