The challenge was based on drupal7 with obvious unserialize call added.
Trying to build a chain and the first solution i found was based on following chain:
./includes/bootstrap.inc
abstract class DrupalCacheArray
...
public function __destruct() {
$data = array();