--TEST-- Bug #72731: Type Confusion in Object Deserialization --FILE-- ryat = 0x1122334455; } } $poc = 'O:8:"stdClass":1:{i:0;O:3:"obj":1:{s:4:"ryat";R:1;}}'; var_dump(unserialize($poc)); ?> --EXPECTF-- %s(73588229205)