Test: /ext/date/tests/bug68942.phpt - Version 7.4.0-dev        

Security #68942 Use after free vulnerability in unserialize() with DateTimeZone
Submitted: 2015-01-29 07:20:00 Modified: 2015-02-27 06:04:13
From: taoguangchen Assigned: derick
Status: Closed Package: Date/time related
PHP Version: 5.4.37 OS: *

There are 2 different diffs reported by users for this test.

Count Diff
4 (67%)
001+ Segmentation fault (core dumped)
002+
003+ Termsig=11
001- Fatal error: Uncaught Error: Timezone initialization failed in %s:%d
002- Stack trace:
003- #0 [internal function]: DateTimeZone->__wakeup()
004- #1 %s(%d): unserialize('a:2:{i:0;O:12:"...')
005- #2 {main}
006- thrown in %s on line %d
2 (33%)
004+ #1 %s/bug68942.php(2): unserialize()
004- #1 %s(%d): unserialize('a:2:{i:0;O:12:"...')