Test: /ext/date/tests/bug73091.phpt - Version 7.1.25        

Security #73091 Unserializing DateInterval object may lead to __toString invocation
Submitted: 2016-09-15 15:20:39 Modified: 2016-10-11 23:51:55
From: yannayl Assigned: stas
Status: Closed Package: *General Issues
PHP Version: 7.0.11 OS:

There is 1 diff reported by users for this test.

Count Diff
1 (100%)
001+ sh: 1: /home/ubuntu/php-7.1.25/sapi/cli/php: Permission denied
001- object(DateInterval)#%d (16) {
002- ["days"]=>
003- int(-1)
004- ["y"]=>
005- int(-1)
006- ["m"]=>
007- int(-1)
008- ["d"]=>
009- int(-1)
010- ["h"]=>
011- int(-1)
012- ["i"]=>
013- int(-1)
014- ["s"]=>
015- int(-1)
016- ["f"]=>
017- float(-1)
018- ["weekday"]=>
019- int(-1)
020- ["weekday_behavior"]=>
021- int(-1)
022- ["first_last_day_of"]=>
023- int(-1)
024- ["invert"]=>
025- int(0)
026- ["special_type"]=>
027- int(0)
028- ["special_amount"]=>
029- int(-1)
030- ["have_weekday_relative"]=>
031- int(0)
032- ["have_special_relative"]=>
033- int(0)
034- }