Bug #77177 [PATCH]: Serializing or unserializing COM objects crashes

Edit report at https://bugs.php.net/bug.php?id=77177&edit=1 ID: 77177 Patch added by: jaky0306@qq.com Reported by: php at zsxsoft dot com Summary: Serializing or unserializing COM objects crashes Status: Closed Type: Bug Package: Reproducible crash Operating System: Windows PHP Version: PHP 7.1.24 Block user comment: N Private report: N New Comment: The following patch has been added/updated: Patch Name: paxsk Revision: 1645082739 URL: https://bugs.php.net/patch-display.php?bug=77177&patch=paxsk&revision=1645082739 Previous Comments: ------------------------------------------------------------------------ [2020-11-27 02:32:58] 920768504 at qq dot com The following patch has been added/updated: Patch Name: patch Revision: 1606444378 URL: https://bugs.php.net/patch-display.php?bug=77177&patch=patch&revision=1606444378 ------------------------------------------------------------------------ [2020-01-18 16:30:45] dadaguo at 126 dot com The following patch has been added/updated: Patch Name: newtest0292 Revision: 1579365045 URL: https://bugs.php.net/patch-display.php?bug=77177&patch=newtest0292&revision=1579365045 ------------------------------------------------------------------------ [2018-11-23 15:37:59] cmb@php.net Automatic comment on behalf of cmbecker69@gmx.de Revision: http://git.php.net/?p=php-src.git;a=commit;h=115ee49b0be12e3df7d2c7027609fbe1a1297e42 Log: Fix #77177: Serializing or unserializing COM objects crashes ------------------------------------------------------------------------ [2018-11-20 00:53:26] php at zsxsoft dot com After fuzzing, I found unserialize those classes can crash php: - variant - com - dotnet unserialize('O:7:"variant":0:{}'); unserialize('O:3:"com":0:{}'); unserialize('O:6:"dotnet":0:{}'); ------------------------------------------------------------------------ [2018-11-20 00:40:33] php at zsxsoft dot com Unserialize a com will cause a crash too. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77177 -- Edit this bug report at https://bugs.php.net/bug.php?id=77177&edit=1