From: foobar <sniper@php.net>
Date: Mon, 5 Sep 2005 16:25:43 +0000 (+0000)
Subject: MFH: - Fixed bug #34311 (unserialize() crashes with characters above 191 dec)
X-Git-Tag: php-4.4.1RC1~30
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6062c27a2bcc78e4cc8d12653a0356461e4615d3;p=php

MFH: - Fixed bug #34311 (unserialize() crashes with characters above 191 dec)
---

diff --git a/NEWS b/NEWS
index ceab71d7b6..d4c4a88074 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,7 @@ PHP 4                                                                      NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 ?? ??? 2005, Version 4.4.1
 - Added "new_link" parameter to mssql_connect(). Bug #34369. (Frank)
+- Fixed bug #34311 (unserialize() crashes with chars above 191 dec). (Nuno)
 - Fixed bug #34307 (on_modify handler not called to set the default value if
   setting from php.ini was invalid). (Andrei)
 - Fixed bug #34302 (date('W') do not return leading zeros for week 1 to 9).
diff --git a/ext/standard/var_unserializer.re b/ext/standard/var_unserializer.re
index a4aee72e15..797fdb042b 100644
--- a/ext/standard/var_unserializer.re
+++ b/ext/standard/var_unserializer.re
@@ -150,7 +150,7 @@ uiv = [+]? [0-9]+;
 iv = [+-]? [0-9]+;
 nv = [+-]? ([0-9]* "." [0-9]+|[0-9]+ "." [0-9]*);
 nvexp = (iv | nv) [eE] [+-]? iv;
-any = [\000-\277];
+any = [\000-\377];
 */