fix bug #63369

(un)serialize() leaves dangling pointers, causes crashes

diff --git a/ext/standard/basic_functions.c b/ext/standard/basic_functions.c
index a30579e14352a9ca2429eb011d5e2052778411ba..d6377df84d682d65a5521d9ee81916ac0d223ffb 100644 (file)
--- a/ext/standard/basic_functions.c
+++ b/ext/standard/basic_functions.c
@@ -3732,6 +3732,11 @@ PHP_MSHUTDOWN_FUNCTION(basic) /* {{{ */
 PHP_RINIT_FUNCTION(basic) /* {{{ */
 {
        memset(BG(strtok_table), 0, 256);
+
+       BG(serialize_lock) = 0;
+       memset(&BG(serialize), 0, sizeof(BG(serialize)));
+       memset(&BG(unserialize), 0, sizeof(BG(unserialize)));
+
        BG(strtok_string) = NULL;
        BG(strtok_zval) = NULL;
        BG(strtok_last) = NULL;