We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents ef5ca80 + f0baf3d commit 5b05d42Copy full SHA for 5b05d42
ext/standard/tests/serialize/oss_fuzz_433303828.phpt
@@ -0,0 +1,13 @@
1
+--TEST--
2
+OSS-Fuzz #433303828
3
+--FILE--
4
+<?php
5
+
6
+unserialize('O:2:"yy": ');
7
+unserialize('O:2:"yy":: ');
8
9
+?>
10
+--EXPECTF--
11
+Warning: unserialize(): Error at offset 9 of 10 bytes in %s on line %d
12
13
+Warning: unserialize(): Error at offset 10 of 11 bytes in %s on line %d
ext/standard/var_unserializer.re
@@ -1312,10 +1312,12 @@ object ":" uiv ":" ["] {
1312
YYCURSOR = *p;
1313
1314
if (*(YYCURSOR) != ':') {
1315
+ zend_string_release_ex(class_name, 0);
1316
return 0;
1317
}
1318
if (*(YYCURSOR+1) != '{') {
1319
*p = YYCURSOR+1;
1320
1321
1322
1323
0 commit comments