History log of /PHP_TRUNK/ext/standard/var_unserializer.re
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
28b7a03 25-Aug-2014 Anatol Belski <ab@php.net> master renamings phase 5
/php-src/ext/standard/var_unserializer.re
c3e3c98 25-Aug-2014 Anatol Belski <ab@php.net> master renames phase 1
/php-src/ext/standard/var_unserializer.re
70de618 24-Aug-2014 Anatol Belski <ab@php.net> fixes to %pd format usage
/php-src/ext/standard/var_unserializer.re
5bb2577 16-Aug-2014 Anatol Belski <ab@php.net> further fixes on core
/php-src/ext/standard/var_unserializer.re
b7e7a89 15-Aug-2014 Anatol Belski <ab@php.net> several fixes -

- param parsing Z_PARAM_STR vs Z_PARAM_STRING
- some functions for new params
- etc
/php-src/ext/standard/var_unserializer.re
73fe418 13-Aug-2014 Dmitry Stogov <dmitry@zend.com> Avoid reallocation
/php-src/ext/standard/var_unserializer.re
b108267 18-Jun-2014 Dmitry Stogov <dmitry@zend.com> Merge branch 'master' into phpng

* master: (41 commits)
Update copyright year to 2014
Update copyright year to 2014
Update copyright year to 2014
Update copyright year to 2014
Update copyright year to 2014
Update copyright year to 2014
Update copyright year to 2014
NEWS
Fix Request #67453 Allow to unserialize empty data.
Update copyright year to 2014
Update copyright year for re2c generated files
Update copyright year to 2014
Update copyright year for re2c files as well
Fix patch for bug #67436
fix failed test
Fix test on modern distro where old unsecure algo are disabled in openssl config. Testing recent algo should be enough to check this function.
Added tests for bug 67436
Fixed wrong XFAIL test - already fixed
Fix typo in Bug #67406 NEWS entry
Fix typo in Bug #67406 NEWS entry
...

Conflicts:
Zend/zend_compile.c
ext/session/session.c
ext/standard/array.c
ext/standard/http_fopen_wrapper.c
tests/classes/bug63462.phpt
11b1834 16-Jun-2014 Lior Kaplan <kaplanlior@gmail.com> Merge branch 'PHP-5.5' into PHP-5.6

* PHP-5.5:
Update copyright year for re2c generated files
Update copyright year to 2014
Update copyright year for re2c files as well
e667d23 16-Jun-2014 Lior Kaplan <kaplanlior@gmail.com> Update copyright year for re2c files as well
/php-src/ext/standard/var_unserializer.re
20568e5 03-Jun-2014 Anatol Belski <ab@php.net> Fixed regression introduced by patch for bug #67072

This applies to 5.4 and 5.5 only as a legacy fix.
/php-src/ext/standard/var_unserializer.re
f9927a6 25-Apr-2014 Dmitry Stogov <dmitry@zend.com> Merge mainstream 'master' branch into refactoring
During merge I had to revert:
Nikita's patch for php_splice() (it probably needs to be applyed again)
Bob Weinand's patches related to constant expression handling (we need to review them carefully)
I also reverted all our attempts to support sapi/phpdbg (we didn't test it anyway)

Conflicts:
Zend/zend.h
Zend/zend_API.c
Zend/zend_ast.c
Zend/zend_compile.c
Zend/zend_compile.h
Zend/zend_constants.c
Zend/zend_exceptions.c
Zend/zend_execute.c
Zend/zend_execute.h
Zend/zend_execute_API.c
Zend/zend_hash.c
Zend/zend_highlight.c
Zend/zend_language_parser.y
Zend/zend_language_scanner.c
Zend/zend_language_scanner_defs.h
Zend/zend_variables.c
Zend/zend_vm_def.h
Zend/zend_vm_execute.h
ext/date/php_date.c
ext/dom/documenttype.c
ext/hash/hash.c
ext/iconv/iconv.c
ext/mbstring/tests/zend_multibyte-10.phpt
ext/mbstring/tests/zend_multibyte-11.phpt
ext/mbstring/tests/zend_multibyte-12.phpt
ext/mysql/php_mysql.c
ext/mysqli/mysqli.c
ext/mysqlnd/mysqlnd_reverse_api.c
ext/mysqlnd/php_mysqlnd.c
ext/opcache/ZendAccelerator.c
ext/opcache/zend_accelerator_util_funcs.c
ext/opcache/zend_persist.c
ext/opcache/zend_persist_calc.c
ext/pcre/php_pcre.c
ext/pdo/pdo_dbh.c
ext/pdo/pdo_stmt.c
ext/pdo_pgsql/pgsql_driver.c
ext/pgsql/pgsql.c
ext/reflection/php_reflection.c
ext/session/session.c
ext/spl/spl_array.c
ext/spl/spl_observer.c
ext/standard/array.c
ext/standard/basic_functions.c
ext/standard/html.c
ext/standard/mail.c
ext/standard/php_array.h
ext/standard/proc_open.c
ext/standard/streamsfuncs.c
ext/standard/user_filters.c
ext/standard/var_unserializer.c
ext/standard/var_unserializer.re
main/php_variables.c
sapi/phpdbg/phpdbg.c
sapi/phpdbg/phpdbg_bp.c
sapi/phpdbg/phpdbg_frame.c
sapi/phpdbg/phpdbg_help.c
sapi/phpdbg/phpdbg_list.c
sapi/phpdbg/phpdbg_print.c
sapi/phpdbg/phpdbg_prompt.c
c2acdbd 18-Apr-2014 Anatol Belski <ab@php.net> Improved the fix for bug #67072, thanks Nikita
/php-src/ext/standard/var_unserializer.re
5328d42 17-Apr-2014 Anatol Belski <ab@php.net> Fixed bug #67072 Echoing unserialized "SplFileObject" crash

The actual issue lays in the unserializer code which doesn't honor
the unserialize callback. By contrast, the serialize callback is
respected. This leads to the situation that even if a class has
disabled the serialization explicitly, user could still construct
a vulnerable string which would result bad things when trying
to unserialize.

This conserns also the classes implementing Serializable as well
as some core classes disabling serialize/unserialize callbacks
explicitly (PDO, SimpleXML, SplFileInfo and co). As of now, the
flow is first to call the unserialize callback (if available),
then call __wakeup. If the unserialize callback returns with no
success, no object is instantiated. This makes the scheme used
by internal classes effective, to disable unserialize just assign
zend_class_unserialize_deny as callback.
/php-src/ext/standard/var_unserializer.re
6bfedfd 10-Apr-2014 Dmitry Stogov <dmitry@zend.com> Fixed unserialize()
/php-src/ext/standard/var_unserializer.re
0ae14f3 10-Apr-2014 Dmitry Stogov <dmitry@zend.com> Fixed access to uninitialized data
/php-src/ext/standard/var_unserializer.re
6ee5e81 09-Apr-2014 Dmitry Stogov <dmitry@zend.com> var_push_dtor_no_addref() is useles (var_push_dtor() doesn't work properly as well)
/php-src/ext/standard/var_unserializer.re
c6cba55 27-Mar-2014 Dmitry Stogov <dmitry@zend.com> Use ZVAL_DEREF() macro
/php-src/ext/standard/var_unserializer.re
887189c 26-Mar-2014 Dmitry Stogov <dmitry@zend.com> Refactored IS_INDIRECT usage for CV and object properties to support HashTable resizing
/php-src/ext/standard/var_unserializer.re
62c448a 17-Mar-2014 Dmitry Stogov <dmitry@zend.com> Fixed serialize/unserialize problems
/php-src/ext/standard/var_unserializer.re
2454036 26-Feb-2014 Xinchen Hui <laruence@gmail.com> Re-fixed unserialize
/php-src/ext/standard/var_unserializer.re
b7052ef 26-Feb-2014 Xinchen Hui <laruence@gmail.com> Revert "Fixed unserialize implementation (it's complicated, this issue took me 4 hours :<, need some review)"

This reverts commit 80a178015d6b162ff0ba7a8e8f5a08c88829cc3c.
/php-src/ext/standard/var_unserializer.re
80a1780 25-Feb-2014 Xinchen Hui <laruence@gmail.com> Fixed unserialize implementation (it's complicated, this issue took me 4 hours :<, need some review)
/php-src/ext/standard/var_unserializer.re
7f527d8 26-Feb-2014 Xinchen Hui <laruence@gmail.com> Fixed reference handling in serialize/unserialize
/php-src/ext/standard/var_unserializer.re
595741f 25-Feb-2014 Xinchen Hui <laruence@gmail.com> Fixed test fail in ext/standard/tests/serialize/bug64354_1.php
/php-src/ext/standard/var_unserializer.re
dc2d758 25-Feb-2014 Xinchen Hui <laruence@gmail.com> Fixed segfaults
/php-src/ext/standard/var_unserializer.re
398256e 14-Feb-2014 Dmitry Stogov <dmitry@zend.com> Use better data structures (incomplete)
/php-src/ext/standard/var_unserializer.re
1ac4d8f 29-Jul-2013 Michael Wallner <mike@php.net> fix bug #65481 (shutdown segfault due to serialize)
/php-src/ext/standard/var_unserializer.re
f52b2e6 09-Mar-2013 Xinchen Hui <laruence@php.net> Fixed bug #64354 (Unserialize array of objects whose class can't be autoloaded fail)

about the __sleep one, since php_serialize_* are all void function,
so,,only check exception at the very begining
/php-src/ext/standard/var_unserializer.re
86c1a26 21-Jan-2013 Xinchen Hui <laruence@php.net> Merge fix of #62836 to ?.re, and regenerate ?.c
/php-src/ext/standard/var_unserializer.re
0a7395e 01-Jan-2013 Xinchen Hui <laruence@php.net> Happy New Year
/php-src/ext/standard/var_unserializer.re
ee772f6 28-Feb-2012 Pierre Joye <pajoye@php.net> - fix bug #60879, unserialize does not invoke __wakeup
/php-src/ext/standard/var_unserializer.re
4e19825 01-Jan-2012 Felipe Pena <felipe@php.net> - Year++
/php-src/ext/standard/var_unserializer.re
6781229 09-Nov-2011 Felipe Pena <felipe@php.net> - Make valgrind happy with session_decode_error2.phpt
/php-src/ext/standard/var_unserializer.re
b692136 19-Oct-2011 Michael Wallner <mike@php.net> Fix Bug #55801 Behavior of unserialize has changed:
(un)serialize in __wakeup/__sleep now use clean var_hashes
/php-src/ext/standard/var_unserializer.re
ecfa660 28-Sep-2011 Gustavo André dos Santos Lopes <cataphract@php.net> - Fixed #55798: serialize followed by unserialize with numeric object prop.
gives integer prop.
/php-src/ext/standard/var_unserializer.re
0203cc3 01-Jan-2011 Felipe Pena <felipe@php.net> - Year++
/php-src/ext/standard/var_unserializer.re
208aa10 18-Sep-2010 Kalle Sommer Nielsen <kalle@php.net> Improved performance of unserialize(), original patch by galaxy dot mipt at gmail dot com
/php-src/ext/standard/var_unserializer.re
31e6390 06-Aug-2010 Rasmus Lerdorf <rasmus@php.net> Do these ops in the right order here. First of many fixes for
bug #52550
/php-src/ext/standard/var_unserializer.re
de8022e 29-Jun-2010 Stanislav Malyshev <stas@php.net> fix SplObjectStorage unserialization (CVE-2010-2225)
/php-src/ext/standard/var_unserializer.re
89e9372 26-May-2010 Michael Wallner <mike@php.net> Added support for object references in recursive serialize() calls. FR #36424
/php-src/ext/standard/var_unserializer.re
ebb467f 03-Jan-2010 Sebastian Bergmann <sebastian@php.net> sed -i "s#1997-2009#1997-2010#g" **/*.re **/*.y **/*.l
/php-src/ext/standard/var_unserializer.re
b117752 17-Mar-2009 Felipe Pena <felipe@php.net> - MFH: Year++
/php-src/ext/standard/var_unserializer.re
927880b 17-Mar-2009 Matt Wilmas <mattwil@php.net> MFH: Fixed bug #46882 (Serialize / Unserialize misbehaviour under OS with different bit numbers)
/php-src/ext/standard/var_unserializer.re
7126de4 04-Nov-2008 Marcus Boerger <helly@php.net> - Next step in namespaces, using / as namespace separator.
/php-src/ext/standard/var_unserializer.re
78d2849 29-Aug-2008 Dmitry Stogov <dmitry@php.net> Fixed bug #45706 (Unserialization of classes derived from ArrayIterator fails)
/php-src/ext/standard/var_unserializer.re
7da75d8 27-May-2008 Matt Wilmas <mattwil@php.net> MFH: Add array_init_size() and use it where array size is known at initialization
/php-src/ext/standard/var_unserializer.re
17c7463 19-Mar-2008 Felipe Pena <felipe@php.net> MFB: Fixed bug #43614 (incorrect processing of numerical string keys of array in arbitrary serialized data)
/php-src/ext/standard/var_unserializer.re
cb0991b 17-Oct-2007 Dmitry Stogov <dmitry@php.net> Fixed bug #42919 (Unserializing of namespaced class object fails)
/php-src/ext/standard/var_unserializer.re
4b4d634 07-Oct-2007 Yiduo (David) Wang <davidw@php.net> MFH: Added macros for managing zval refcounts and is_ref statuses
/php-src/ext/standard/var_unserializer.re
e029a0e 29-Sep-2007 Nuno Lopes <nlopess@php.net> fix a few compiler warnings (mostly use of unitialized values)
/php-src/ext/standard/var_unserializer.re
6bd9f53 06-Aug-2007 Jani Taskinen <jani@php.net> - fix ws
/php-src/ext/standard/var_unserializer.re
57f3c5b 06-Aug-2007 Ilia Alshanetsky <iliaa@php.net> Fixed compiler warning
/php-src/ext/standard/var_unserializer.re
fe9a826 09-Jul-2007 Dmitry Stogov <dmitry@php.net> Proper fix for MOPB-29
/php-src/ext/standard/var_unserializer.re
2c06cea 27-Mar-2007 Antony Dovgal <tony2001@php.net> MFH: fix compile warning
/php-src/ext/standard/var_unserializer.re
0af75d6 23-Mar-2007 Stanislav Malyshev <stas@php.net> fix MOPB-29 - unserialize modifier S does not calculate length correctly
# reported by Stefan Esser
/php-src/ext/standard/var_unserializer.re
8f5310a 15-Dec-2006 Andrei Zmievski <andrei@php.net> Support for 'S' format in unserialize() (forward compatibility with PHP
6)
/php-src/ext/standard/var_unserializer.re
e3fd315 01-Jan-2006 foobar <sniper@php.net> bump the year and license version
/php-src/ext/standard/var_unserializer.re
020f1ba 05-Sep-2005 foobar <sniper@php.net> MFH: - Fixed bug #34311 (unserialize() crashes with characters above 191 dec)
/php-src/ext/standard/var_unserializer.re
23e671a 03-Aug-2005 foobar <sniper@php.net> - Bumber up year
/php-src/ext/standard/var_unserializer.re
9383e1b 01-Jun-2005 Dmitry Stogov <dmitry@php.net> Fixed bug #30791 (magic methods (__sleep/__wakeup/__toString) call __call if object is overloaded)
/php-src/ext/standard/var_unserializer.re
b185ee0 31-May-2005 foobar <sniper@php.net> - Fixed bug with unserialize() with "exotic" letters in class names
# Patch by: Christian Schneider <cschneid@cschneid.com>
/php-src/ext/standard/var_unserializer.re
22fcd1a 10-Mar-2005 Marcus Boerger <helly@php.net> - Fix #31442 unserialize broken on 64-bit systems
- Fix one warning
/php-src/ext/standard/var_unserializer.re
9c08e3c 07-Mar-2005 Marcus Boerger <helly@php.net> - Update signature
/php-src/ext/standard/var_unserializer.re
e2f1b37 28-Feb-2005 Stefan Esser <sesser@php.net> This way around for correct error messages
/php-src/ext/standard/var_unserializer.re
b7476a5 28-Feb-2005 Stefan Esser <sesser@php.net> Drop invalid arrays
/php-src/ext/standard/var_unserializer.re
634a5ec 27-Feb-2005 Stanislav Malyshev <stas@php.net> fix typo
/php-src/ext/standard/var_unserializer.re
8919a7a 24-Feb-2005 Stanislav Malyshev <stas@php.net> fix typo
/php-src/ext/standard/var_unserializer.re
0ef1f50 23-Feb-2005 Stefan Esser <sesser@php.net> Correcting bounds check before someone uses this code
/php-src/ext/standard/var_unserializer.re
db3fdce 23-Feb-2005 Stanislav Malyshev <stas@php.net> Custom object serializer infrastructure - PHP implementation
# The detailed announce on the list will follow
/php-src/ext/standard/var_unserializer.re
ff8055f 14-Feb-2005 Marcus Boerger <helly@php.net> - Disallow illegal class names
/php-src/ext/standard/var_unserializer.re
112eb3b 30-Jan-2005 Ilia Alshanetsky <iliaa@php.net> Fix handling of INF/NAN in unserialize().
/php-src/ext/standard/var_unserializer.re
4a52947 26-Jan-2005 Ilia Alshanetsky <iliaa@php.net> Fixed bug #31699 (unserialize() float problem on non-English locales).
/php-src/ext/standard/var_unserializer.re
da7001a 17-Jan-2005 Stefan Esser <sesser@php.net> Fix compiler warning.
/php-src/ext/standard/var_unserializer.re
135fee7 15-Jan-2005 Stefan Esser <sesser@php.net> and use it...
/php-src/ext/standard/var_unserializer.re
2c25b9d 15-Jan-2005 Stefan Esser <sesser@php.net> Restore unserialize() speed
/php-src/ext/standard/var_unserializer.re
9a18fb1 03-Dec-2004 Stefan Esser <sesser@php.net> Handle already existing elements correctly
/php-src/ext/standard/var_unserializer.re
1094a0d 01-Dec-2004 Stefan Esser <sesser@php.net> Beware of negative indices
/php-src/ext/standard/var_unserializer.re
abe4730 26-Sep-2004 Marcus Boerger <helly@php.net> - Earlier detection of failure
/php-src/ext/standard/var_unserializer.re
8564352 12-Sep-2004 Marcus Boerger <helly@php.net> - Readd check for nested data (but correct this time)
/php-src/ext/standard/var_unserializer.re
06ade1a 12-Sep-2004 Marcus Boerger <helly@php.net> - Check for legal key types
/php-src/ext/standard/var_unserializer.re
6200c9a 12-Sep-2004 Marcus Boerger <helly@php.net> - Remove wrong test
/php-src/ext/standard/var_unserializer.re
efea880 05-Sep-2004 Marcus Boerger <helly@php.net> - Add some checks to unserialize() to prevent bufferoverflows
/php-src/ext/standard/var_unserializer.re
56f8195 19-Jul-2004 Andi Gutmans <andi@php.net> - Nuke empty_string. It is a reminanent from the time where RETURN_FALSE()
used to return "" and not bool(false). It's not worth keeping it because
STR_FREE() and zval_dtor() always have to check for it and it slows down
the general case. In addition, it seems that empty_string has been abused
quite a lot, and was used not only for setting zval's but generally in
PHP code instead of "", which wasn't the intention. Last but not least,
nuking empty_string should improve stability as I doubt every place
correctly checked if they are not mistakenly erealloc()'ing it or
calling efree() on it.
NOTE: Some code is probably broken. Each extension maintainer should
check and see that my changes are OK. Also, I haven't had time to touch
PECL yet. Will try and do it tomorrow.
/php-src/ext/standard/var_unserializer.re
bc0373b 27-Mar-2004 Marcus Boerger <helly@php.net> Portable solution for bug #27646 that works correct on Windows, too
/php-src/ext/standard/var_unserializer.re
fdcff80 23-Mar-2004 Marcus Boerger <helly@php.net> - Allow negative infinity
- Register missing constants, they work anyway but cause an E_NOTICE
# generation by atof() should be portable enough (afaik)
/php-src/ext/standard/var_unserializer.re
c64376b 23-Mar-2004 Marcus Boerger <helly@php.net> Bugfix #27646: Cannot serialize/unserialize non-finite numeric values
/php-src/ext/standard/var_unserializer.re
3fd027c 03-Feb-2004 Stanislav Malyshev <stas@php.net> fix bug #27120 and bug #25975 - preserve is_ref when bound
objects are serialized
/php-src/ext/standard/var_unserializer.re
ccfc46b 08-Jan-2004 foobar <sniper@php.net> - Happy new year and PHP 5 for rest of the files too..
# Should the LICENSE and Zend/LICENSE dates be updated too?
/php-src/ext/standard/var_unserializer.re
0cd13bf 02-Jan-2004 Marcus Boerger <helly@php.net> Bugfix #26762 unserialize() produces lowercase classnames
/php-src/ext/standard/var_unserializer.re
ba6c58a 03-Sep-2003 foobar <sniper@php.net> - Fixed bug #25378 (Invalid data passed to unserialize() causes segfault)
/php-src/ext/standard/var_unserializer.re
53bbeed 05-Aug-2003 Stanislav Malyshev <stas@php.net> don't try to wakeup incomplete classes
/php-src/ext/standard/var_unserializer.re
1379c46 02-Jul-2003 Moriyoshi Koizumi <moriyoshi@php.net> Fixed a leak that occurs with "R" reference variable specifier.
/php-src/ext/standard/var_unserializer.re
a0ae636 26-Jun-2003 Sterling Hughes <sterling@php.net> fix by ilia to fix crashes in the session extension when /tmp/sess_* files
previously existed. make test now passes fully with the session extension.
/php-src/ext/standard/var_unserializer.re
f68c7ff 10-Jun-2003 James Cox <imajes@php.net> updating license information in the headers.
/php-src/ext/standard/var_unserializer.re
5725048 02-Jun-2003 Sebastian Bergmann <sebastian@php.net> Leftover.
/php-src/ext/standard/var_unserializer.re
3b2fa8b 24-May-2003 Marcus Boerger <helly@php.net> Fix namespace related problems
/php-src/ext/standard/var_unserializer.re
2307193 18-May-2003 Marcus Boerger <helly@php.net> Fix unserialize
/php-src/ext/standard/var_unserializer.re
b319982 17-Apr-2003 foobar <sniper@php.net> add missing header
/php-src/ext/standard/var_unserializer.re
38ad0e9 24-Jan-2003 Ilia Alshanetsky <iliaa@php.net> zend_error -> php_error_docref.
/php-src/ext/standard/var_unserializer.re
47ae406 19-Aug-2002 Sander Roobol <sander@php.net> Made unserialize handle floats with an E notation - bug #18654
Patch by Christophe Sollet <csollet@coleebris.com>.
(I'll commit a new var_unserializer.c in a second)
/php-src/ext/standard/var_unserializer.re
05156fa 18-Aug-2002 Stanislav Malyshev <stas@php.net> ZE2 compatibility fix
## In ZE2 the hash contains zend_class_entry *!
/php-src/ext/standard/var_unserializer.re
7645343 04-Aug-2002 Shane Caraveo <shane@php.net> need to export var_replace and var_destroy for win32
/php-src/ext/standard/var_unserializer.re
2438488 04-May-2002 Sascha Schumann <sas@php.net> rval_temp was declared but never used
/php-src/ext/standard/var_unserializer.re
a57381e 28-Apr-2002 Stanislav Malyshev <stas@php.net> Fix couple of nasty serializer bugs:
a) When array unserializer encounters less data than it expects (like:
a:1:{}) it crashes. I don't understand exactly why it does, but the fact
is it does. So now it should catch "}" and bail out.
b) When array/object data are serialized, the count is written by hash
count. However, it can be that in-loop check fails and less data than
expected will then be written into the array. Which, due to a), would
crash on unserialize. So now it will write empty entries in place of
entries it cannot serialize (the other choice would be make two passes on
the data, which I don't like).
/php-src/ext/standard/var_unserializer.re
65c4e9e 17-Mar-2002 Harald Radi <phanto@php.net> removed anoying warnings
/php-src/ext/standard/var_unserializer.re
c8e7db9 12-Mar-2002 Andi Gutmans <andi@php.net> - Allow duality between Engine 1 & 2 using ZEND_STANDARD_CLASS_DEF_PTR
/php-src/ext/standard/var_unserializer.re
99639f5 02-Dec-2001 Bernd Roemer <bernd@php.net> Allow unserializer_callback_func to be turned off.
/php-src/ext/standard/var_unserializer.re
534b0f7 26-Nov-2001 Derick Rethans <derick@php.net> - Also patch the file from which var_unserializer.c is generated
/php-src/ext/standard/var_unserializer.re
9f33629 16-Nov-2001 Sascha Schumann <sas@php.net> Fix two incidents which have been reported about the new unserializer.

#1: forgot to handle negative numbers
#2: added zval_ptr_dtor which was not in the original code which
might lead to crash

PR: #14082
/php-src/ext/standard/var_unserializer.re
f341f63 10-Nov-2001 Sascha Schumann <sas@php.net> Rewrite of unserializer which should be more maintainable and extensible.

Changes pass `make test´ and a couple of custom tests.

Enjoy.
/php-src/ext/standard/var_unserializer.re