Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20 System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64 User : apache ( 48) PHP Version : 7.4.20 Disable Function : NONE Directory : /proc/self/root/usr/share/tests/pecl/msgpack/tests/ |
--TEST--
Unserialize invalid data
--SKIPIF--
--FILE--
<?php
if(!extension_loaded('msgpack')) {
dl('msgpack.' . PHP_SHLIB_SUFFIX);
}
$datas = array(
87817,
-1,
array(1,2,3,"testing" => 10, "foo"),
true,
false,
0.187182,
"dakjdh98389\000",
null,
(object)array(1,2,3),
);
error_reporting(0);
foreach ($datas as $data) {
$str = msgpack_serialize($data);
$len = strlen($str);
// truncated
for ($i = 0; $i < $len - 1; $i++) {
$v = msgpack_unserialize(substr($str, 0, $i));
if (is_object($data) || is_array($data)) {
if ($v !== null && $v !== false && $v != $data) {
echo "output at $i:\n";
var_dump($v);
}
} else if ($v !== null && $v == $data) {
continue;
} else if ($v !== null && $v !== $data) {
echo "output at $i:\n";
var_dump($v);
echo "vs.\n";
var_dump($data);
}
}
// padded
$str .= "98398afa\000y21_ ";
$v = msgpack_unserialize($str);
if ($v !== $data && !(is_object($data) && $v == $data)) {
echo "padded should get original\n";
var_dump($v);
echo "vs.\n";
var_dump($data);
}
}
?>
--EXPECTF--
output at 1:
bool(false)
vs.
int(87817)
output at 2:
bool(false)
vs.
int(87817)
output at 3:
bool(false)
vs.
int(87817)
output at 1:
bool(false)
vs.
float(0.187182)
output at 2:
bool(false)
vs.
float(0.187182)
output at 3:
bool(false)
vs.
float(0.187182)
output at 4:
bool(false)
vs.
float(0.187182)
output at 5:
bool(false)
vs.
float(0.187182)
output at 6:
bool(false)
vs.
float(0.187182)
output at 7:
bool(false)
vs.
float(0.187182)
output at 1:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 2:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 3:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 4:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 5:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 6:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 7:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 8:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 9:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 10:
bool(false)
vs.
string(12) "dakjdh98389 "
output at 11:
bool(false)
vs.
string(12) "dakjdh98389 "