#31169 [Opn->Fbk]: unserialize is broken

From: Date: Sat, 18 Dec 2004 02:12:49 +0000
Subject: #31169 [Opn->Fbk]: unserialize is broken
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-70566@lists.php.net to get a copy of this message 
 ID:               31169
 Updated by:       jed@php.net
 Reported By:      michael at digitalgnosis dot com
-Status:           Open
+Status:           Feedback
 Bug Type:         *General Issues
 Operating System: Linux
 PHP Version:      5.0.3
 New Comment:

Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to "Open".

Thank you for your interest in PHP.



Previous Comments:
------------------------------------------------------------------------

[2004-12-18 03:06:07] michael at digitalgnosis dot com

Description:
------------
unserialize() call which works under 4.3.0 and 5.0.2-1 is now broken
under 5.0.3-1 (script hangs until max execution time).  I'm using the
dotdeb.org package so they might be responsible, however the changelog
for 5.0.3 mentions the following update:

"Fixed potential problems with unserializing invalid serialize data.
(Marcus)"

The data being unserialized is about 6.4MB.

Reproduce code:
---------------
unserialize(file_get_contents('sixmegfile.dat'));



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=31169&edit=1

Thread (9 messages)

« previous php.bugs (#70566) next »