3v4l.org

run code in 300+ PHP versions simultaneously
<?php class CantUnserializeThis extends ArrayObject { } $className = 'CantUnserializeThis'; $reflection = new ReflectionClass($className); $serialized = serialize(new ArrayObject()); $chunks = explode(':', $serialized); $serializedValuesChunks = implode(':', array_slice($chunks, 3)); var_dump(unserialize(sprintf( 'C:%d:"%s":%s', strlen($className), $className, $serializedValuesChunks ))); var_dump(unserialize(sprintf( 'O:%d:"%s":%s', strlen($className), $className, $serializedValuesChunks ))); var_dump($reflection->newInstanceWithoutConstructor());
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/oSPvF
function name:  (null)
number of ops:  57
compiled vars:  !0 = $className, !1 = $reflection, !2 = $serialized, !3 = $chunks, !4 = $serializedValuesChunks
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    7     0  E >   ASSIGN                                                   !0, 'CantUnserializeThis'
    8     1        NEW                                              $6      'ReflectionClass'
          2        SEND_VAR_EX                                              !0
          3        DO_FCALL                                      0          
          4        ASSIGN                                                   !1, $6
    9     5        INIT_FCALL                                               'serialize'
          6        NEW                                              $9      'ArrayObject'
          7        DO_FCALL                                      0          
          8        SEND_VAR                                                 $9
          9        DO_ICALL                                         $11     
         10        ASSIGN                                                   !2, $11
   10    11        INIT_FCALL                                               'explode'
         12        SEND_VAL                                                 '%3A'
         13        SEND_VAR                                                 !2
         14        DO_ICALL                                         $13     
         15        ASSIGN                                                   !3, $13
   11    16        INIT_FCALL                                               'implode'
         17        SEND_VAL                                                 '%3A'
         18        INIT_FCALL                                               'array_slice'
         19        SEND_VAR                                                 !3
         20        SEND_VAL                                                 3
         21        DO_ICALL                                         $15     
         22        SEND_VAR                                                 $15
         23        DO_ICALL                                         $16     
         24        ASSIGN                                                   !4, $16
   13    25        INIT_FCALL                                               'var_dump'
         26        INIT_FCALL                                               'unserialize'
         27        INIT_FCALL                                               'sprintf'
   14    28        SEND_VAL                                                 'C%3A%25d%3A%22%25s%22%3A%25s'
   15    29        STRLEN                                           ~18     !0
         30        SEND_VAL                                                 ~18
   16    31        SEND_VAR                                                 !0
   17    32        SEND_VAR                                                 !4
         33        DO_ICALL                                         $19     
         34        SEND_VAR                                                 $19
         35        DO_ICALL                                         $20     
         36        SEND_VAR                                                 $20
         37        DO_ICALL                                                 
   20    38        INIT_FCALL                                               'var_dump'
         39        INIT_FCALL                                               'unserialize'
         40        INIT_FCALL                                               'sprintf'
   21    41        SEND_VAL                                                 'O%3A%25d%3A%22%25s%22%3A%25s'
   22    42        STRLEN                                           ~22     !0
         43        SEND_VAL                                                 ~22
   23    44        SEND_VAR                                                 !0
   24    45        SEND_VAR                                                 !4
         46        DO_ICALL                                         $23     
         47        SEND_VAR                                                 $23
         48        DO_ICALL                                         $24     
         49        SEND_VAR                                                 $24
         50        DO_ICALL                                                 
   27    51        INIT_FCALL                                               'var_dump'
         52        INIT_METHOD_CALL                                         !1, 'newInstanceWithoutConstructor'
         53        DO_FCALL                                      0  $26     
         54        SEND_VAR                                                 $26
         55        DO_ICALL                                                 
         56      > RETURN                                                   1

Class CantUnserializeThis: [no user functions]

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
156.35 ms | 1400 KiB | 27 Q