blob: 97076ffe466e9d6dc473cc5c70f539ef0710af51 (
plain)
1
2
3
4
5
6
7
8
9
|
--TEST--
Bug #74103: heap-use-after-free when unserializing invalid array size
--FILE--
<?php
var_dump(unserialize('a:7:{i:0;i:04;s:1:"a";i:2;i:00009617006;i:4;s:1:"a";i:4;s:1:"a";R:5;s:1:"7";R:3;s:1:"a";R:5;;s:18;}}'));
?>
--EXPECTF--
Notice: unserialize(): Error at offset %d of %d bytes in %s on line %d
bool(false)
|
