#31442 [Opn]: unserialize broken
| From: | michal at cihar dot com | Date: | Fri, 07 Jan 2005 15:53:11 +0000 |
| Subject: | #31442 [Opn]: unserialize broken | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-71572@lists.php.net to get a copy of this message | ||
ID: 31442
User updated by: michal at cihar dot com
Reported By: michal at cihar dot com
Status: Open
Bug Type: Zend Engine 2 problem
Operating System: Linux, 64-bit
PHP Version: 4.3.10
New Comment:
I haven't found way to attach patches here, so it's available on my
web: http://www.cihar.com/misc/php-unserializer.patch
Previous Comments:
------------------------------------------------------------------------
[2005-01-07 16:48:11] michal at cihar dot com
Description:
------------
Unserializing of numbers > MAX_INT is wrong. That's because php uses
long internally for storing ints but int is used in unserializing.
Attached patch fixes this issue.
Reproduce code:
---------------
<?php
echo unserialize(serialize(2147483648));
?>
Expected result:
----------------
2147483648
Actual result:
--------------
-2147483648
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=31442&edit=1