xref: /PHP-7.4/ext/date/tests/bug68942.phpt (revision 5d2294e8) 
1--TEST--
2Bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone).
3--FILE--
4<?php
5$data = unserialize('a:2:{i:0;O:12:"DateTimeZone":2:{s:13:"timezone_type";a:2:{i:0;i:1;i:1;i:2;}s:8:"timezone";s:1:"A";}i:1;R:4;}');
6var_dump($data);
7?>
8--EXPECTF--
9Fatal error: Uncaught Error: Timezone initialization failed in %s:%d
10Stack trace:
11#0 [internal function]: DateTimeZone->__wakeup()
12#1 %s(%d): unserialize('a:2:{i:0;O:12:"...')
13#2 {main}
14  thrown in %s on line %d
15