You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 16, 2018. It is now read-only.
Zend_Validate_File_Extension::isValid() doesn't check that $info['extension'] is set before giving it to strtolower() on line 207. The $info array comes from pathinfo() on line 198.
I'm using Zend Framework 1.12.3.
Zend_Validate_File_Extension::isValid()
doesn't check that$info['extension']
is set before giving it tostrtolower()
on line 207. The$info
array comes frompathinfo()
on line 198.pathinfo()
do not guarantee that theextension
index will be set according to the PHP manual:http://se2.php.net/pathinfo#example-2422
You have to check that the
extension
index exist before using it.This bug breaks my application in debug mode due to PHP Notices sent in a json-response.
The text was updated successfully, but these errors were encountered: