MFH: - Fixed bug #34311 (unserialize() crashes with characters above 191 dec)

diff --git a/NEWS b/NEWS
index ca2c780ec2cd45415e5fc312ab08e822ff873204..549db6525246f631f4a520065adf828cdb275c2c 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -23,6 +23,7 @@ PHP                                                                        NEWS
 - Fixed failing queries (FALSE returned) with mysqli_query() on 64 bit systems.
   (Andrey)
 - Fixed bug #34331 (php crashes when variables_order is empty). (Ilia)
+- Fixed bug #34311 (unserialize() crashes with chars above 191 dec). (Nuno)
 - Fixed bug #34310 (foreach($arr as $c->d => $x) crashes). (Dmitry)
 - Fixed bug #34307 (on_modify handler not called to set the default value if
   setting from php.ini was invalid). (Andrei)     

diff --git a/ext/standard/var_unserializer.re b/ext/standard/var_unserializer.re
index 09d63d30bdeb4117ea15f7573e005b101419327b..b877f8c27e534d6f3809b97dc937777687dbc379 100644 (file)
--- a/ext/standard/var_unserializer.re
+++ b/ext/standard/var_unserializer.re
@@ -150,7 +150,7 @@ uiv = [+]? [0-9]+;
 iv = [+-]? [0-9]+;
 nv = [+-]? ([0-9]* "." [0-9]+|[0-9]+ "." [0-9]*);
 nvexp = (iv | nv) [eE] [+-]? iv;
-any = [\000-\277];
+any = [\000-\377];
 object = [OC];
 */