1--TEST-- 2OSS-Fuzz: Unserializing SplObjectStorage with negative number of elements 3--SKIPIF-- 4<?php if (PHP_INT_SIZE != 8) die("skip requires 64-bit"); ?> 5--FILE-- 6<?php 7 8$str = 'C:16:"SplObjectStorage":25:{x:i:-9223372036854775808;}'; 9try { 10 var_dump(unserialize($str)); 11} catch (Exception $e) { 12 echo $e->getMessage(), "\n"; 13} 14 15?> 16--EXPECT-- 17Error at offset 24 of 25 bytes 18