]> granicus.if.org Git - php/commit
Sanity-check array/object lengths during unserialization
authorNikita Popov <nikita.ppv@gmail.com>
Mon, 16 Sep 2019 09:38:35 +0000 (11:38 +0200)
committerNikita Popov <nikita.ppv@gmail.com>
Mon, 16 Sep 2019 09:38:35 +0000 (11:38 +0200)
commit4377a8ea41786d7b30e229378a3dc5b1b5b5289b
tree9a998f4420bed9bbdf38820b29854a1c405085ec
parent6417c507ce511ecfc5d3f3818ffb01435f3086ee
Sanity-check array/object lengths during unserialization

Avoid OOM conditions in unserialize due to overly large array or
object length specifications.
ext/standard/tests/serialize/bug74101.phpt
ext/standard/tests/serialize/unserialize_large.phpt [new file with mode: 0644]
ext/standard/var_unserializer.re