3v4l.org

run code in 300+ PHP versions simultaneously
<?php class CantUnserializeThis extends ArrayObject { } $className = 'CantUnserializeThis'; $serialized = serialize(new ArrayObject()); $chunks = explode(':', $serialized); $serializedValuesChunks = implode(':', array_slice($chunks, 3)); var_dump(unserialize(sprintf( 'C:%d:"%s":%s', strlen($className), $className, $serializedValuesChunks ))); var_dump(unserialize(sprintf( 'O:%d:"%s":%s', strlen($className), $className, $serializedValuesChunks )));
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Ss2Yk
function name:  (null)
number of ops:  48
compiled vars:  !0 = $className, !1 = $serialized, !2 = $chunks, !3 = $serializedValuesChunks
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    7     0  E >   ASSIGN                                                   !0, 'CantUnserializeThis'
    8     1        INIT_FCALL                                               'serialize'
          2        NEW                                              $5      'ArrayObject'
          3        DO_FCALL                                      0          
          4        SEND_VAR                                                 $5
          5        DO_ICALL                                         $7      
          6        ASSIGN                                                   !1, $7
   10     7        INIT_FCALL                                               'explode'
          8        SEND_VAL                                                 '%3A'
          9        SEND_VAR                                                 !1
         10        DO_ICALL                                         $9      
         11        ASSIGN                                                   !2, $9
   11    12        INIT_FCALL                                               'implode'
         13        SEND_VAL                                                 '%3A'
         14        INIT_FCALL                                               'array_slice'
         15        SEND_VAR                                                 !2
         16        SEND_VAL                                                 3
         17        DO_ICALL                                         $11     
         18        SEND_VAR                                                 $11
         19        DO_ICALL                                         $12     
         20        ASSIGN                                                   !3, $12
   13    21        INIT_FCALL                                               'var_dump'
         22        INIT_FCALL                                               'unserialize'
         23        INIT_FCALL                                               'sprintf'
   14    24        SEND_VAL                                                 'C%3A%25d%3A%22%25s%22%3A%25s'
   15    25        STRLEN                                           ~14     !0
         26        SEND_VAL                                                 ~14
   16    27        SEND_VAR                                                 !0
   17    28        SEND_VAR                                                 !3
         29        DO_ICALL                                         $15     
         30        SEND_VAR                                                 $15
         31        DO_ICALL                                         $16     
         32        SEND_VAR                                                 $16
         33        DO_ICALL                                                 
   20    34        INIT_FCALL                                               'var_dump'
         35        INIT_FCALL                                               'unserialize'
         36        INIT_FCALL                                               'sprintf'
   21    37        SEND_VAL                                                 'O%3A%25d%3A%22%25s%22%3A%25s'
   22    38        STRLEN                                           ~18     !0
         39        SEND_VAL                                                 ~18
   23    40        SEND_VAR                                                 !0
   24    41        SEND_VAR                                                 !3
         42        DO_ICALL                                         $19     
         43        SEND_VAR                                                 $19
         44        DO_ICALL                                         $20     
         45        SEND_VAR                                                 $20
         46        DO_ICALL                                                 
   25    47      > RETURN                                                   1

Class CantUnserializeThis: [no user functions]

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
152.43 ms | 1392 KiB | 27 Q