Bug #77283 [NEW]: memory exhausted when unserialize data

From: jasonxiale at mail dot ru Operating system: Linux(4.15.0-42-generic) PHP version: master-Git-2018-12-11 (Git) Package: Class/Object related Bug Type: Bug Bug description:memory exhausted when unserialize data Description: ------------ when fuzzing php unserialize function using command as: ./sapi/cli/php -r 'unserialize(file_get_contents("php://stdin"));' < basic_fuzz/fuzzer11/crashes/id\:000000\,sig\:06\,src\:000158+000528\,op\:splice\,rep\:2 I got an error: Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 42949672960 bytes) in Command line code on line 1 Test script: --------------- the base64-ed input is like base64 basic_fuzz/fuzzer11/crashes/id\:000000\,sig\:06\,src\:000158+000528\,op\:splice\,rep\:2 YTozOntpOjA7YToyOntpOjA7TzoxOiIxIjowNzc3Nzc3Nzc3Ojc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3 Nzc3Nzc3Nzc3Nzc7ASkxOip//yI3Nzc3NzQiO31pOkk7YToyOntpOjA7aVwxO2k3N6UXMSNpAAAA AX0= -- Edit bug report at https://bugs.php.net/bug.php?id=77283&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=77283&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=77283&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=77283&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=77283&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=77283&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=77283&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=77283&r=needscript Try newer version: https://bugs.php.net/fix.php?id=77283&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=77283&r=support Expected behavior: https://bugs.php.net/fix.php?id=77283&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=77283&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=77283&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=77283&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=77283&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=77283&r=dst IIS Stability: https://bugs.php.net/fix.php?id=77283&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=77283&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=77283&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=77283&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=77283&r=mysqlcfg