1--TEST-- 2Bug #72663 (3): If unserialization fails, don't initialize the session with the result 3--EXTENSIONS-- 4session 5--INI-- 6session.serialize_handler=php_serialize 7--FILE-- 8<?php 9session_start(); 10$sess = 'O:9:"Exception":2:{s:7:"'."\0".'*'."\0".'file";s:0:"";}'; 11session_decode($sess); 12var_dump($_SESSION); 13?> 14--EXPECTF-- 15Warning: session_decode(): Unexpected end of serialized data in %s on line %d 16 17Warning: session_decode(): Failed to decode session object. Session has been destroyed in %s on line %d 18array(0) { 19} 20