From: Stanislav Malyshev <stas@php.net>
Date: Fri, 23 Mar 2007 20:22:52 +0000 (+0000)
Subject: fix MOPB-29 - unserialize modifier S does not calculate length correctly
X-Git-Tag: php-5.2.2RC1~102
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=10f7bb95e82712967a011bc2f7ca7d5d693d2705;p=php

fix MOPB-29 - unserialize modifier S does not calculate length correctly
---

diff --git a/NEWS b/NEWS
index aef208aa6b..a0097509d0 100644
--- a/NEWS
+++ b/NEWS
@@ -134,6 +134,8 @@ PHP                                                                        NEWS
   statements in mysqli) (Stas)
 - Fixed unallocated memory access/double free in in array_user_key_compare() 
   (MOPB-24 by Stefan Esser) (Stas)
+- Fixed wrong length calculation in unserialize S type
+  (MOPB-29 by Stefan Esser) (Stas)
 
 08 Feb 2007, PHP 5.2.1
 - Added read-timeout context option "timeout" for HTTP streams. (Hannes, Ilia).