Skip to content

Fix GH-22046: The unserialize function with Uri\WhatWg\Url leads to NULL pointer dereference when object serialized back#22058

Open
kocsismate wants to merge 1 commit into
php:PHP-8.5from
kocsismate:gh22046-fix
Open

Fix GH-22046: The unserialize function with Uri\WhatWg\Url leads to NULL pointer dereference when object serialized back#22058
kocsismate wants to merge 1 commit into
php:PHP-8.5from
kocsismate:gh22046-fix

Conversation

@kocsismate
Copy link
Copy Markdown
Member

@kocsismate kocsismate commented May 15, 2026

Unserializing from the "C" format is explicitly disabled.

…o NULL pointer dereference when object serialized back

The "C" serialization format is explicitly disabled.
@kocsismate kocsismate requested a review from TimWolla as a code owner May 15, 2026 21:32
@kocsismate kocsismate changed the base branch from master to PHP-8.5 May 15, 2026 21:32
Copy link
Copy Markdown
Member

@TimWolla TimWolla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As mentioned in the issue, this should get a general fix. But the patch LGTM if we decide for some reason not to fix this generally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants