1--TEST-- 2Fix GH-9186 @strict-properties can be bypassed using unserialization 3--FILE-- 4<?php 5 6try { 7 unserialize('O:17:"Random\Randomizer":1:{i:0;a:2:{s:3:"foo";N;s:6:"engine";O:32:"Random\Engine\Xoshiro256StarStar":2:{i:0;a:0:{}i:1;a:4:{i:0;s:16:"7520fbc2d6f8de46";i:1;s:16:"84d2d2b9d7ba0a34";i:2;s:16:"d975f36db6490b32";i:3;s:16:"c19991ee16785b94";}}}}'); 8} catch (Exception $error) { 9 echo $error->getMessage() . "\n"; 10} 11 12?> 13--EXPECT-- 14Invalid serialization data for Random\Randomizer object 15