ZerethShell — File Manager

030.phpt

--TEST--
Unserialize invalid data
--SKIPIF--
--FILE--
<?php
if(!extension_loaded('msgpack')) {
    dl('msgpack.' . PHP_SHLIB_SUFFIX);
}

$datas = array(
    87817,
    -1,
    array(1,2,3,"testing" => 10, "foo"),
    true,
    false,
    0.187182,
    "dakjdh98389\000",
    null,
    (object)array(1,2,3),
);

error_reporting(0);

foreach ($datas as $data) {
    $str = msgpack_serialize($data);
    $len = strlen($str);

// truncated
    for ($i = 0; $i < $len - 1; $i++) {
        $v = msgpack_unserialize(substr($str, 0, $i));

if (is_object($data) || is_array($data)) {
            if ($v !== null && $v !== false && $v != $data) {
                echo "output at $i:\n";
                var_dump($v);
            }
        } else if ($v !== null && $v == $data) {
            continue;
        } else if ($v !== null && $v !== $data) {
            echo "output at $i:\n";
            var_dump($v);
            echo "vs.\n";
            var_dump($data);
        }
    }

// padded
    $str .= "98398afa\000y21_ ";
    $v = msgpack_unserialize($str);
    if ($v !== $data && !(is_object($data) && $v == $data)) {
        echo "padded should get original\n";
        var_dump($v);
        echo "vs.\n";
        var_dump($data);
    }
}
?>
--EXPECTF--
output at 1:
bool(false)
vs.
int(87817)
output at 2:
bool(false)
vs.
int(87817)
output at 3:
bool(false)
vs.
int(87817)
output at 1:
bool(false)
vs.
float(0.187182)
output at 2:
bool(false)
vs.
float(0.187182)
output at 3:
bool(false)
vs.
float(0.187182)
output at 4:
bool(false)
vs.
float(0.187182)
output at 5:
bool(false)
vs.
float(0.187182)
output at 6:
bool(false)
vs.
float(0.187182)
output at 7:
bool(false)
vs.
float(0.187182)
output at 1:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 2:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 3:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 4:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 5:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 6:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 7:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 8:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 9:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 10:
bool(false)
vs.
string(12) "dakjdh98389�"
output at 11:
bool(false)
vs.
string(12) "dakjdh98389�"

Vazgeç