Edit report at http://bugs.php.net/bug.php?id=53437&edit=1
ID: 53437
Updated by: cataphr...@php.net
Reported by: from dot php dot net at brainbox dot cz
Summary: Crash when using unserialized DatePeriod instance
-Status: Open
+Status: Verified
Type: Bug
Package: Date/time related
Operating System: Windows XP SP3
PHP Version: 5.3.3
Block user comment: N
Private report: N
Previous Comments:
------------------------------------------------------------------------
[2010-12-01 17:15:05] from dot php dot net at brainbox dot cz
Description:
------------
DatePeriod class does not have the serialization/unserialization logic
implemented. Therefore, when unserialized instance is used, script
crashes.
This is result of serializing the DatePeriod instance:
O:10:"DatePeriod":0:{}
unserialize() wents fine as well, but when I call foreach() on
unserialized instance, the script crashes.
Test script:
---------------
$dp = new DatePeriod(new DateTime('2010-01-01 UTC'), new
DateInterval('P1D'), 2);
echo "Original:\r\n";
foreach($dp as $dt) {
echo $dt->format('Y-m-d H:i:s')."\r\n";
}
echo "\r\n";
$ser = serialize($dp); // $ser is: O:10:"DatePeriod":0:{}
// Create dangerous instance
$dpu = unserialize($ser); // $dpu has invalid valuesâ¦
echo "Unserialized:\r\n";
// â¦which leads to CRASH:
foreach($dpu as $dt) {
echo $dt->format('Y-m-d H:i:s')."\r\n";
}
Expected result:
----------------
Original:
2010-01-01 00:00:00
2010-01-02 00:00:00
2010-01-03 00:00:00
Unserialized:
2010-01-01 00:00:00
2010-01-02 00:00:00
2010-01-03 00:00:00
Actual result:
--------------
PHP crashes on the "unserialize" line.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/bug.php?id=53437&edit=1
