danielbeardsley · August 14, 2012 23:34 · danielbeardsley · Sep 14, 2012
diff --git a/.gitignore b/.gitignore
 *.out
 a.ser
diff --git a/A.php b/A.php
 <?

 class A {
 }
diff --git a/B.php b/B.php
 <?

 class B {
 }

diff --git a/run_test.sh b/run_test.sh
 #!/bin/sh
 php serialize_autoload.php > before.out
 php unserialize_autoload.php > after.out
 echo "Original =========="
 cat before.out
 echo 
 echo "Unserialized ======"
 cat after.out
 echo 
 echo "Diff =============="
 (diff -a before.out after.out && echo "Passed, no differences") ||
 echo "FAILED ============"
diff --git a/serialize_autoload.php b/serialize_autoload.php
 <?php
 require "setup.php";

 $a = new A();
 $b = new B();
 $c = new B();
 $a->b = $b;
 $a->b1 = $b;
 $a->c = $c;
 $a->c1 = $c;
 var_dump($a);
 file_put_contents('a.ser', serialize($a));
diff --git a/setup.php b/setup.php
 <?php
 function __autoload($name)
 {
   echo "in autoload: $name\n";
   //  This call causes the bug
   unserialize('i:4;');
   require "$name.php";
   return true;
 }
diff --git a/unserialize_autoload.php b/unserialize_autoload.php
 <?php
 require 'setup.php';

 var_dump(unserialize(file_get_contents("a.ser")));
	#!/bin/sh
	php serialize_autoload.php > before.out
	php unserialize_autoload.php > after.out
	echo "Original =========="
	cat before.out
	echo
	echo "Unserialized ======"
	cat after.out
	echo
	echo "Diff =============="
	(diff -a before.out after.out && echo "Passed, no differences") \|\|
	echo "FAILED ============"
	<?php
	require "setup.php";

	$a = new A();
	$b = new B();
	$c = new B();
	$a->b = $b;
	$a->b1 = $b;
	$a->c = $c;
	$a->c1 = $c;
	var_dump($a);
	file_put_contents('a.ser', serialize($a));
	<?php
	require 'setup.php';

	var_dump(unserialize(file_get_contents("a.ser")));