Commit 79d76a560a5 for php.net
commit 79d76a560a5f646881dc45a4b1b76332304e345f
Author: Gina Peter Banyard <girgias@php.net>
Date: Thu Jul 30 11:38:22 2026 +0100
serializer: must duplicate unserialize_callback_func global zstr
diff --git a/ext/standard/var_unserializer.re b/ext/standard/var_unserializer.re
index 458ad2f12ba..27647c907d3 100644
--- a/ext/standard/var_unserializer.re
+++ b/ext/standard/var_unserializer.re
@@ -1256,7 +1256,7 @@ object ":" uiv ":" ["] {
}
/* Call unserialize callback */
- ZVAL_STR_COPY(&user_func, PG(unserialize_callback_func));
+ ZVAL_STR(&user_func, zend_string_dup(PG(unserialize_callback_func), false));
ZVAL_STR(&args[0], class_name);
BG(serialize_lock)++;