#31169 [Fbk->Opn]: unserialize is broken
ID: 31169
User updated by: michael at digitalgnosis dot com
Reported By: michael at digitalgnosis dot com
-Status: Feedback
+Status: Open
Bug Type: *General Issues
Operating System: Linux
PHP Version: 5.0.3
New Comment:
Tested 5.0.x and 5.1.x snapshots; broken there too. Code runs unchanged
in 4.3.0.
Previous Comments:
------------------------------------------------------------------------
[2004-12-18 03:14:07] jed@php.net
Also, please try a pure build from http://www.php.net/downloads.php and
thank you.
------------------------------------------------------------------------
[2004-12-18 03:12:48] jed@php.net
Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php
If you can provide more information, feel free to add it
to this bug and change the status back to "Open".
Thank you for your interest in PHP.
------------------------------------------------------------------------
[2004-12-18 03:06:07] michael at digitalgnosis dot com
Description:
------------
unserialize() call which works under 4.3.0 and 5.0.2-1 is now broken
under 5.0.3-1 (script hangs until max execution time). I'm using the
dotdeb.org package so they might be responsible, however the changelog
for 5.0.3 mentions the following update:
"Fixed potential problems with unserializing invalid serialize data.
(Marcus)"
The data being unserialized is about 6.4MB.
Reproduce code:
---------------
unserialize(file_get_contents('sixmegfile.dat'));
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=31169&edit=1
Thread (9 messages)