Bug #67072 [Asn->Csd]: Echoing unserialized "SplFileObject" crash

Edit report at https://bugs.php.net/bug.php?id=67072&edit=1 ID: 67072 Updated by: ab@php.net Reported by: arteau dot olivier at gmail dot com Summary: Echoing unserialized "SplFileObject" crash -Status: Assigned +Status: Closed Type: Bug Package: Reproducible crash Operating System: Windows / Linux PHP Version: 5.5.11 Assigned To: ab Block user comment: N Private report: N New Comment: Automatic comment on behalf of ab Revision: http://git.php.net/?p=php-src.git;a=commit;h=5328d4289946e260232f3195ba2e0f0eb173d5ef Log: Fixed bug #67072 Echoing unserialized &quot;SplFileObject&quot; crash Previous Comments: ------------------------------------------------------------------------ [2014-04-14 04:22:33] arteau dot olivier at gmail dot com Description: ------------ Executing the script below crashes PHP. Some quick debugging on my part seems to point to a NULL dereference bug in the spl related code. However, since I was debugging from the binary it's hard to tell where exactly in the code it is. Test script: --------------- <?php echo unserialize('O:13:"SplFileObject":1:{s:9:"*filename";s:15:"/home/flag/flag";}'); ?> Expected result: ---------------- Since "SplFileObject" aren't serializable, an exception should be thrown or bool(false) should be returned. Actual result: -------------- PHP crash. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=67072&edit=1