1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
--TEST--
Bug #72663 (1): Don't call __destruct if __wakeup not called or fails
--FILE--
<?php
#[AllowDynamicProperties]
class Test1 {
public function __wakeup() {
echo "Wakeup\n";
}
public function __destruct() {
echo "Dtor\n";
}
}
#[AllowDynamicProperties]
class Test2 {
public function __wakeup() {
throw new Exception('Unserialization forbidden');
}
public function __destruct() {
echo "Dtor\n";
}
}
// Unserialize object with error in properties
$s = 'O:5:"Test1":1:{s:10:"";}';
var_dump(unserialize($s));
// Variation: Object is turned into a reference
$s = 'O:5:"Test1":2:{i:0;R:1;s:10:"";}';
var_dump(unserialize($s));
// Unserialize object with throwing __wakeup
$s = 'O:5:"Test2":0:{}';
try {
var_dump(unserialize($s));
} catch (Exception $e) {
echo "Caught\n";
}
//
// Variation: Object is turned into a reference
$s = 'O:5:"Test2":1:{i:0;R:1;}';
try {
var_dump(unserialize($s));
} catch (Exception $e) {
echo "Caught\n";
}
?>
--EXPECTF--
Warning: unserialize(): Error at offset 17 of 24 bytes in %s on line %d
bool(false)
Warning: unserialize(): Error at offset 25 of 32 bytes in %s on line %d
bool(false)
Caught
Caught
|
