[php-src] PR #24433: ext/standard: Validate objects before queuing unserialize callbacks
| From: | iliaal | Date: | Mon, 19 Oct 2026 13:25:47 +0000 |
| Subject: | [php-src] PR #24433: ext/standard: Validate objects before queuing unserialize callbacks | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-39595@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/24433
Author: iliaal
The unserializer now checks each object's closing brace before queuing
__unserialize() or __wakeup(), so incomplete objects skip their callback
and destructor. Related to #21716, which changes when already-queued callbacks are drained.