Bug #28833
closed
INTincScript_process: array check too late
Added by Björn Pedersen over 13 years ago.
Updated about 6 years ago.
Description
Found by reading:
$INTiS_key = 'INT_SCRIPT.'.substr($INTiS_cPart,0,32);
$GLOBALS['TT']->push('Include '.$INTiS_config[$INTiS_key]['file'],'');
$incContent='';
if (is_array($INTiS_config[$INTiS_key])) {
$INTiS_cObj = unserialize($INTiS_config[$INTiS_key]['cObj']);
/* @var $INTiS_cObj tslib_cObj */
$INTiS_cObj->INT_include=1;
$INTiS_config[$INTiS_key] is accessed as array (subkey ['file']) before the is_array check.
Additionally, the output is processed, even if uninitalized.
Patch set 1 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
- Status changed from New to Under Review
Patch set 2 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 3 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 4 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 5 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 6 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 7 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 8 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 9 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
Patch set 10 of change Ia1355206b2a2e7bdc1cfa9b15402abb2ef3f36d5 has been pushed to the review server.
It is available at http://review.typo3.org/4215
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
- Status changed from Resolved to Closed
Also available in: Atom
PDF