Re: [PHP-DEV] Unserialize Bug

2005-05-18 Thread Christian Schneider
Derick Rethans wrote: On Tue, 17 May 2005, Timm Friebe wrote: Fix === Allow anything the parser allows, [a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]* Do you have a patch? :) I attached a patch for ext/standard/var_unserializer.{c,re} - Chris Index: ext/standard/var_unserializer.c ===

Re: [PHP-DEV] Unserialize Bug

2005-05-18 Thread Christian Schneider
Derick Rethans wrote: On Tue, 17 May 2005, Timm Friebe wrote: Fix === Allow anything the parser allows, [a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]* Do you have a patch? :) Oops, and here a patch without the debug fprintf :-) - Chris Index: ext/standard/var_unserializer.c =

Re: [PHP-DEV] Unserialize Bug

2005-05-17 Thread Jani Taskinen
Is it documented anywhere what the allowed chars are..? (I couldn't find it anywhere but sources :) --Jani On Tue, 17 May 2005, Timm Friebe wrote: Hi, unserialize() cannot unserialize objects whose names contain anything except a-z, 0-9 and _, the parser allows those, though. Example ==

AW: [PHP-DEV] Unserialize Bug

2005-05-17 Thread Timm Friebe
Hi, > > Fix > > === > > Allow anything the parser allows, > > [a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]* > > Do you have a patch? :) Sorry, no, I'm working under Windows at the moment *without* any development tools installed except for cygwin, and IIRC PHP won't build with just that (meaning I co

Re: [PHP-DEV] Unserialize Bug

2005-05-17 Thread Derick Rethans
On Tue, 17 May 2005, Timm Friebe wrote: > Fix > === > Allow anything the parser allows, [a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]* Do you have a patch? :) regards, Derick -- Derick Rethans http://derickrethans.nl | http://ez.no | http://xdebug.org -- PHP Internals - PHP Runtime Development Mai

[PHP-DEV] Unserialize Bug

2005-05-17 Thread Timm Friebe
Hi, unserialize() cannot unserialize objects whose names contain anything except a-z, 0-9 and _, the parser allows those, though. Example === $ cat unserialize.php Expected behaviour == $ php unserialize.php object(über)(0) { } Actual behaviour $ php unser

Re: [PHP-DEV] Unserialize bug in PHP 4.3.2RC4?

2003-06-06 Thread Jean-Pierre Arneodo
entry found in bugs.php.net Jean-Pierre - Original Message - From: "James Cox" <[EMAIL PROTECTED]> To: "Jean-Pierre Arneodo" <[EMAIL PROTECTED]> Sent: Friday, May 23, 2003 6:44 PM Subject: RE: [PHP-DEV] Unserialize bug in PHP 4.3.2RC4? [skip] > > > From: