Hi,
I just wanted to address again these two patches to be applied in 5.3/5.4
http://git.php.net/?p=php-src.git;a=commitdiff;h=0ee71557ffd285552659b6aa37ea236e3bad493f
http://git.php.net/?p=php-src.git;a=commitdiff;h=fa3fc711d3fb54bf1746138ffcf7f46426921204
Both are in 5.5 already for some weeks, tested and proven to fix the crash
in unserializing the DateTime object family.
The important points do welcome this fix
are
- we deal with crash vs. bailout here
- no other patch is available
- a finer handling could introduce even more behaviour changes
The history of this fix recalls the ticket from back more than 3 years ago
https://bugs.php.net/53437 . The changes was considered OK by Derick and
I'd really go on to apply those patches to 5.3+ as a clean die is in any
case more vital than crash. That would fix the last known crash in
5.3/5.4, that might make very much sense to put those in.
Thanks
Anatol