#31169 [Fbk]: unserialize is broken

ID: 31169 Updated by: jed@php.net Reported By: michael at digitalgnosis dot com Status: Feedback Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.3 New Comment: Also, please try a pure build from http://www.php.net/downloads.php and thank you. Previous Comments: ------------------------------------------------------------------------ [2004-12-18 03:12:48] jed@php.net Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to "Open". Thank you for your interest in PHP. ------------------------------------------------------------------------ [2004-12-18 03:06:07] michael at digitalgnosis dot com Description: ------------ unserialize() call which works under 4.3.0 and 5.0.2-1 is now broken under 5.0.3-1 (script hangs until max execution time). I'm using the dotdeb.org package so they might be responsible, however the changelog for 5.0.3 mentions the following update: "Fixed potential problems with unserializing invalid serialize data. (Marcus)" The data being unserialized is about 6.4MB. Reproduce code: --------------- unserialize(file_get_contents('sixmegfile.dat')); ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=31169&edit=1