ID:               31970
 Updated by:       [EMAIL PROTECTED]
 Reported By:      marie_bw at web dot de
 Status:           Bogus
 Bug Type:         *Programming Data Structures
-Operating System: Linux (Gentoo)
+Operating System: *
 PHP Version:      4.3.10
 New Comment:

In version prior to 4.3.10 there was such an error. So if the input is
from such a version the problem is solved now. Unless you have a
reproducing script that generates serialized data that cannot be
unserialized using current version this report should stay bogus.


Previous Comments:
------------------------------------------------------------------------

[2005-02-14 18:51:16] marie_bw at web dot de

After heavy investigation I suspect that
the problems originate from the Adodb mysql
driver which is bundled with Phpopenchat and
another problem in this application.

Escape characters are erroneously stripped
from already serialized strings in two
different places (one of them in the 
approvement cycle of moderated chat channels)

It basically can be circumvented by disabling
"magic_quotes_gpc" but only by chance.

I reset the status of this report to "bogus"
as this might not touch PHP in any way.

------------------------------------------------------------------------

[2005-02-14 14:39:45] marie_bw at web dot de

Description:
------------
On complex objects the serialize() function produced
output in which string members of an object would be
stored together with a wrong string size, e.g. the
string length ist 60 bytes but serialize() notes only 58.

The data can't be processed by unserialize().

This would only happen if characters like single or
double quote were present in the string (this string
came from HTTP_POST_VAR). But also a substitution
of quotation character by '"' or 'x' would not
bother serialize() to produce the right output.

This is not reproducible with small objects. The
objects in question where rather complex and came
from the application "phpopenchat".




------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=31970&edit=1

Reply via email to