[SECURITY] Mitigate phar stream wrapper 59/57559/2
authorChristian Kuhn <lolli@schwarzbu.ch>
Thu, 12 Jul 2018 09:35:37 +0000 (11:35 +0200)
committerOliver Hader <oliver.hader@typo3.org>
Thu, 12 Jul 2018 09:35:41 +0000 (11:35 +0200)
commit421ef424220f16e1078719d49b1b210e78233772
tree4f9b31feb3f9e5de9cafa66d566ffcc8834f5e47
parentb3b7d453a20e140a1d81d609ef4b9c61932238ab
[SECURITY] Mitigate phar stream wrapper

SoftReferenceIndex throws exceptions on phar streams
LegacyLinkNotationConverter throws exceptions on phar streams

Resolves: #85385
Releases: master, 8.7, 7.6
Security-Commit: 4fde9d6a2333435af9033f55e9a5e2d428f6ea0d
Security-Bulletin: TYPO3-CORE-SA-2018-002
Change-Id: I69333fff4d94dc7369ba729333a39e8be5dda7a3
Reviewed-on: https://review.typo3.org/57559
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/core/Classes/Database/SoftReferenceIndex.php
typo3/sysext/core/Classes/LinkHandling/LegacyLinkNotationConverter.php
typo3/sysext/core/Tests/Unit/Database/SoftReferenceIndexTest.php [new file with mode: 0644]
typo3/sysext/core/Tests/Unit/LinkHandling/LegacyLinkNotationConverterTest.php