ZVAL reference counter code execution
| From: | Bill Rausch | Date: | Wed, 21 Nov 2007 23:11:52 +0000 |
| Subject: | ZVAL reference counter code execution | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-264952@lists.php.net to get a copy of this message | ||
Hi all,
Do I have to worry about the ZVAL overflow vulnerability if I don't use unserialize() in my code? Or is it used behind the scenes whether I call it directly or not?
I have a web server running PHP 4.4.4 with only one custom application running on it. The server is dedicated to this one application.
Thanks,
Bill