From eb0e14c298eb3f4cf9c5389257350695bcc9e044 Mon Sep 17 00:00:00 2001
From: Dmitriy Tkachenko <dimddr87@gmail.com>
Date: Thu, 28 Mar 2019 21:03:17 +0800
Subject: [PATCH] [Serializer] Added check of constuctor modifiers to
 AbstractNormalizer

---
 .../Component/Serializer/Normalizer/AbstractNormalizer.php    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
index 3f181e4e99a5..f99c61a36bd3 100644
--- a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
+++ b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
@@ -333,6 +333,10 @@ protected function instantiateObject(array &$data, $class, array &$context, \Ref
 
         $constructor = $this->getConstructor($data, $class, $context, $reflectionClass, $allowedAttributes);
         if ($constructor) {
+            if (true !== $constructor->isPublic()) {
+                return $reflectionClass->newInstanceWithoutConstructor();
+            }
+
             $constructorParameters = $constructor->getParameters();
 
             $params = [];