Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:119746
MIME-Version: 1.0
References: <f37f233b-6645-d618-0868-78cbadb649a2@bastelstu.be>
In-Reply-To: <f37f233b-6645-d618-0868-78cbadb649a2@bastelstu.be>
Date: Mon, 27 Mar 2023 20:20:58 +0200
Message-ID: <CABdc3WovbsYH2BTsTbeD71bSfM44C1nocXtoxQpPo=E2Fq4iLQ@mail.gmail.com>
To: =?UTF-8?Q?Tim_D=C3=BCsterhus?= <tim@bastelstu.be>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="0000000000009749dd05f7e5ce16"
Subject: Re: [PHP-DEV] RFC [Discussion]: Make unserialize() emit a warning for
 trailing bytes
From: michal.brzuchalski@gmail.com (=?UTF-8?Q?Micha=C5=82_Marcin_Brzuchalski?=)

--0000000000009749dd05f7e5ce16
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Tim,

thanks for the RFC

pon., 27 mar 2023 o 19:04 Tim D=C3=BCsterhus <tim@bastelstu.be> napisa=C5=
=82(a):

> Hi
>
> I'm now opening discussion for the RFC "Make unserialize() emit a
> warning for trailing bytes":
>
> ----
>
> RFC: Make unserialize() emit a warning for trailing bytes
> https://wiki.php.net/rfc/unserialize_warn_on_trailing_data
>
> Proof of concept implementation is in:
>
> https://github.com/php/php-src/pull/9630
>
> ----
>
> Best regards
> Tim D=C3=BCsterhus
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: https://www.php.net/unsub.php
>
>
 Personally, I'd like the unserialize to throw an exception if trailing
bytes are detected.
If not by default then with the use of the option passed to unserialize
function.

Cheers,
Micha=C5=82 Marcin Brzuchalski

--0000000000009749dd05f7e5ce16--