mirror of
https://github.com/php/php-src.git
synced 2024-09-22 10:27:25 +00:00
15 lines
569 B
PHP
15 lines
569 B
PHP
--TEST--
|
|
Bug #68942 (Use after free vulnerability in unserialize() with DateTime).
|
|
--FILE--
|
|
<?php
|
|
$data = unserialize('a:2:{i:0;O:8:"DateTime":3:{s:4:"date";s:26:"2000-01-01 00:00:00.000000";s:13:"timezone_type";a:2:{i:0;i:1;i:1;i:2;}s:8:"timezone";s:1:"A";}i:1;R:5;}');
|
|
var_dump($data);
|
|
?>
|
|
--EXPECTF--
|
|
Fatal error: Uncaught Error: Invalid serialization data for DateTime object in %sbug68942_2.php:%d
|
|
Stack trace:
|
|
#0 [internal function]: DateTime->__wakeup()
|
|
#1 %sbug68942_2.php(%d): unserialize('a:2:{i:0;O:8:"D...')
|
|
#2 {main}
|
|
thrown in %sbug68942_2.php on line %d
|