diff options
| author | Nikita Popov <nikita.ppv@gmail.com> | 2019-09-24 11:50:26 +0200 |
|---|---|---|
| committer | Nikita Popov <nikita.ppv@gmail.com> | 2019-09-30 10:28:24 +0200 |
| commit | 1806ce9cb019ee74ddb540cbc07daf121dcb5537 (patch) | |
| tree | f2e30e502885dd431416a8803cce95aaacc4dfe4 /ext/dom/php_dom.c | |
| parent | ce769a94a8d350e4fbe4f95639fff165f7568bab (diff) | |
| download | php-git-1806ce9cb019ee74ddb540cbc07daf121dcb5537.tar.gz | |
Add max_depth option to unserialize()
Add a max_depth option to unserialize and an unserialize_max_depth
ini setting, which can be used to control the depth limit. The
default value is 4096.
This option is intended to prevent stack overflows during the
unserialization of deeply nested structures.
This fixes bug #78549 and addresses oss-fuzz #17581, #17589, #17664,
and #17788.
Diffstat (limited to 'ext/dom/php_dom.c')
0 files changed, 0 insertions, 0 deletions