php-igbinary package version is outdated and has various bugs

[Tyson Andre]

Ubuntu 16.04 is affected, probably every Ubuntu release with php 7.0.

Installations with php 5 should be unaffected, though igbinary releases also contain performance improvements.

This should be upgraded to 2.0.0 (on PECL) or 2.0.1. The PHP function signatures and integration with other extensions(header files) haven't changed.

https://github.com/igbinary/igbinary/releases mentions other bugs

https://github.com/igbinary/igbinary/pull/79 was also fixed.

ondrej's php ppa (different repo from this bug report) is also affected.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Claudio Mettler (ponyfleisch)]

This is made worse by the fact that installing php-redis causes php-igbinary to be installed as well. In my case, we're running TYPO3 CMS with redis for caching. The TYPO3 caching framework uses igbinary if available and this breaks in really subtle ways. See https://github.com/igbinary/igbinary/issues/114 for the particular issue.

[Ondřej Surý (ondrej)]

@tysona: Thank you very much for taking care of several PHP extensions! This is much appreciated. JFTR I have updated php-igbinary in ppa:ondrej/php and in Debian unstable.

[Christian Weiske (cweiske)]

We also were bitten by this bug. TYPO3 failed in weird problems because reflection data could not be unserialized correctly. ("PHP Warning: class_parents(): object or string expected [...] in DataMapper.php")

[Tyson (tysonandre775)]

A related issue was reported again in https://github.com/igbinary/igbinary/issues/299 in PHP 7.4, Ubuntu 20.04 and igbinary 3.1.2, in the form of a reproducible segmentation fault for ArrayObject.

There have been no changes to the igbinary v2 serialization format itself - 3.1.6 and 3.1.2 should be able to serialize and unserialize the data each other produces

Two notable bug/crash fixes are included in 3.1.6 - see https://github.com/igbinary/igbinary/releases

- Fix unserialization of PHP references to internal/user-defined classes using PHP 7.4's __unserialize (e.g. ArrayObject)
- Fix igbinary_serialize incorrectly deduplicating arrays/objects/references when they were garbage collected/freed during serialization.

(I'm one of the maintainers of igbinary)