Bug #17490 Updated: serialize() generates a string that unserialize() can't handle

From:	php-bugs at lists dot php dot net	Date:	Mon, 15 Jul 2002 05:00:08 +0000
Subject:	Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-14170@lists.php.net to get a copy of this message

 ID:               17490
 Updated by:       php-bugs@lists.php.net
 Reported By:      weyrick@roadsend.com
-Status:           Feedback
+Status:           No Feedback
 Bug Type:         Session related
 Operating System: linux rh7.2
 PHP Version:      4.2.1
 New Comment:

No feedback was provided for this bug for over a month, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".


Previous Comments:
------------------------------------------------------------------------

[2002-06-21 11:21:59] nigel.king@nuth.northy.nhs.uk

Forgot to add that this is on Solaris 8, not linux.

------------------------------------------------------------------------

[2002-06-21 11:19:29] nigel.king@nuth.northy.nhs.uk

Not sure if this is relevant but...

during my final make run (thanks for the advice in CC=gcc) I noticed a
warning during the compilation of var_unserializer.c.

var_unserializer.c: In function 'php_var_unserialize':
var_unserializer.c: 308: warning: comparison is always false due to
limited range of data type

I don't know the code but I can imagine that unserialize could take the
wrong action and fail.  If this is the case then this is a bug.

------------------------------------------------------------------------

[2002-05-29 13:34:08] weyrick@roadsend.com

can you be more specific on why it's not a bug? if it's a spec, where
(and what) is that spec? or point me to the correct line of code in the
codebase.

unfortunately it's not easy for me to create a small script to
reproduce this, as the code that generates it includes a large library
of routines. it's obviously possible to generate it without all that,
but since i dont know exactly what's causing it it would be a lot of
trial and error figuring out how to reproduce it.

------------------------------------------------------------------------

[2002-05-29 13:11:31] yohgaki@php.net

Oops sorry. I must go to bed now. 
Could you make a short script for this bug?
 

------------------------------------------------------------------------

[2002-05-29 13:09:34] yohgaki@php.net

This is not a bug, but it is the way session module serializes
variables. It's a spec.

It can be fixed, though.
 

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/17490

-- 
Edit this bug report at http://bugs.php.net/?id=17490&edit=1



   

Thread (26 messages)

• weyrick at roadsend dot comTue, 28 May 2002 19:41:40 +0000
  • yohgaki@php.netWed, 29 May 2002 17:09:34 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • yohgaki@php.netWed, 29 May 2002 17:11:31 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • weyrick at roadsend dot comWed, 29 May 2002 17:34:09 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • nigel dot king at nuth dot northy dot nhs dot ukFri, 21 Jun 2002 15:19:30 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • nigel dot king at nuth dot northy dot nhs dot ukFri, 21 Jun 2002 15:21:59 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • php-bugs at lists dot php dot netMon, 15 Jul 2002 05:00:08 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • dougqh at incogen dot comTue, 23 Jul 2002 16:32:46 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • weyrick at roadsend dot comTue, 23 Jul 2002 17:28:20 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • dougqh at incogen dot comTue, 23 Jul 2002 18:18:46 +0000Bug #17490 Updated: serialize() generates a string that unserialize() can't handle
  • weyrick at roadsend dot comMon, 29 Jul 2002 14:23:01 +0000#17490 [NoF->Opn]: serialize() generates a string that unserialize() can't handle
  • mark dot hershenson at aresdirect dot comWed, 21 Aug 2002 18:53:04 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • sniper@php.netThu, 22 Aug 2002 01:08:11 +0000#17490 [Opn->Fbk]: serialize() generates a string that unserialize() can't handle
  • mark dot hershenson at aresdirect dot comThu, 22 Aug 2002 04:38:48 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • dougqh at incogen dot comThu, 22 Aug 2002 18:17:59 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • sniper@php.netThu, 22 Aug 2002 21:19:24 +0000#17490 [Fbk->Opn]: serialize() generates a string that unserialize() can't handle
  • weyrick at roadsend dot comMon, 09 Sep 2002 18:09:57 +0000#17490 [Opn]: serialize() generates a string that unserialize() can't handle
  • dougqh at incogen dot comMon, 16 Sep 2002 14:28:55 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • sas@php.netWed, 25 Sep 2002 11:34:04 +0000#17490 [Opn]: serialize() generates a string that unserialize() can't handle
  • iliaa@php.netFri, 11 Oct 2002 03:54:10 +0000#17490 [Opn->Fbk]: serialize() generates a string that unserialize() can't handle
  • dougqh at incogen dot comWed, 16 Oct 2002 16:03:16 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • dougqh at incogen dot comWed, 16 Oct 2002 17:55:36 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • php-bugs at lists dot php dot netSat, 26 Oct 2002 06:00:08 +0000#17490 [Fbk->NoF]: serialize() generates a string that unserialize() can't handle
  • memeyou at memeyou dot netMon, 12 May 2003 20:10:01 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • -b2 dot p7 at telus dot netMon, 02 Jun 2003 19:55:30 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle
  • -b2 dot p7 at telus dot netThu, 05 Jun 2003 21:19:44 +0000#17490 [Com]: serialize() generates a string that unserialize() can't handle