fix MOPB-29 - unserialize modifier S does not calculate length correctly

diff --git a/NEWS b/NEWS
index aef208aa6b45eb8ad8583f701cf3f0bf0f79b12c..a0097509d0a60ab47bdd27a3be4a8b573233fde7 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -134,6 +134,8 @@ PHP                                                                        NEWS
   statements in mysqli) (Stas)
 - Fixed unallocated memory access/double free in in array_user_key_compare() 
   (MOPB-24 by Stefan Esser) (Stas)
+- Fixed wrong length calculation in unserialize S type
+  (MOPB-29 by Stefan Esser) (Stas)
 
 08 Feb 2007, PHP 5.2.1
 - Added read-timeout context option "timeout" for HTTP streams. (Hannes, Ilia).