| files >> /var/www/html/sub/images/Rm19_symconf/root/php-7.1.11/ext/standard/tests/serialize/ |
| files >> //var/www/html/sub/images/Rm19_symconf/root/php-7.1.11/ext/standard/tests/serialize/bug72731.phpt |
--TEST--
Bug #72731: Type Confusion in Object Deserialization
--FILE--
<?php
class obj {
var $ryat;
function __wakeup() {
$this->ryat = 0x1122334455;
}
}
$poc = 'O:8:"stdClass":1:{i:0;O:3:"obj":1:{s:4:"ryat";R:1;}}';
var_dump(unserialize($poc));
?>
--EXPECTF--
%s(73588229205)
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`