3v4l.org

run code in 300+ PHP versions simultaneously
<?php print file_get_contents('/usr/lib/libSegFault.so'); $badblobs = array( 'x:i:2;i:0;,i:1;;i:0;,i:2;;m:a:0:{}', 'x:i:3;O:8:"stdClass":0:{},O:8:"stdClass":0:{};R:2;,i:1;;O:8:"stdClass":0:{},r:2;;m:a:0:{}', 'x:i:3;O:8:"stdClass":0:{},O:8:"stdClass":0:{};r:2;,i:1;;O:8:"stdClass":0:{},r:2;;m:a:0:{}', 'x:i:1;O:8:"stdClass":0:{},N;;m:s:40:"1234567890123456789012345678901234567890"', ); foreach($badblobs as $blob) { try { $so = new SplObjectStorage(); $so->unserialize($blob); var_dump($so); } catch(UnexpectedValueException $e) { echo $e->getMessage()."\n"; } }
Finding entry points
Branch analysis from position: 0
2 jumps found. (Code = 77) Position 1 = 6, Position 2 = 23
Branch analysis from position: 6
2 jumps found. (Code = 78) Position 1 = 7, Position 2 = 23
Branch analysis from position: 7
1 jumps found. (Code = 42) Position 1 = 22
Branch analysis from position: 22
1 jumps found. (Code = 42) Position 1 = 6
Branch analysis from position: 6
Branch analysis from position: 23
1 jumps found. (Code = 62) Position 1 = -2
Branch analysis from position: 23
Found catch point at position: 17
Branch analysis from position: 17
2 jumps found. (Code = 107) Position 1 = 18, Position 2 = -2
Branch analysis from position: 18
1 jumps found. (Code = 42) Position 1 = 6
Branch analysis from position: 6
filename:       /in/dLSSH
function name:  (null)
number of ops:  25
compiled vars:  !0 = $badblobs, !1 = $blob, !2 = $so, !3 = $e
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    2     0  E >   INIT_FCALL                                               'file_get_contents'
          1        SEND_VAL                                                 '%2Fusr%2Flib%2FlibSegFault.so'
          2        DO_ICALL                                         $4      
          3        ECHO                                                     $4
    3     4        ASSIGN                                                   !0, <array>
    9     5      > FE_RESET_R                                       $6      !0, ->23
          6    > > FE_FETCH_R                                               $6, !1, ->23
   11     7    >   NEW                                              $7      'SplObjectStorage'
          8        DO_FCALL                                      0          
          9        ASSIGN                                                   !2, $7
   12    10        INIT_METHOD_CALL                                         !2, 'unserialize'
         11        SEND_VAR_EX                                              !1
         12        DO_FCALL                                      0          
   13    13        INIT_FCALL                                               'var_dump'
         14        SEND_VAR                                                 !2
         15        DO_ICALL                                                 
         16      > JMP                                                      ->22
   14    17  E > > CATCH                                       last         'UnexpectedValueException'
   15    18    >   INIT_METHOD_CALL                                         !3, 'getMessage'
         19        DO_FCALL                                      0  $12     
         20        CONCAT                                           ~13     $12, '%0A'
         21        ECHO                                                     ~13
    9    22    > > JMP                                                      ->6
         23    >   FE_FREE                                                  $6
   17    24      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
152.59 ms | 1396 KiB | 17 Q