[SECURITY] Mitigate phar stream wrapper 45/57545/2
authorChristian Kuhn <lolli@schwarzbu.ch>
Thu, 12 Jul 2018 09:32:06 +0000 (11:32 +0200)
committerOliver Hader <oliver.hader@typo3.org>
Thu, 12 Jul 2018 09:32:10 +0000 (11:32 +0200)
commit844c6f49f776b2b274b563432c676114191362f9
tree49088fed4eb7c2537a906137961a313e31f85246
parentd7d1de4396e85af219bb4c1e7d4e0116b534e37d
[SECURITY] Mitigate phar stream wrapper

SoftReferenceIndex throws exceptions on phar streams
LegacyLinkNotationConverter throws exceptions on phar streams

Resolves: #85385
Releases: master, 8.7, 7.6
Security-Commit: f11da6bc371729fd8ab556af8e2b84c9f8501704
Security-Bulletin: TYPO3-CORE-SA-2018-002
Change-Id: Iad230e9a0fe876b879eac810b6fa14b6d9f4fcdb
Reviewed-on: https://review.typo3.org/57545
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
typo3/sysext/core/Classes/Database/SoftReferenceIndex.php
typo3/sysext/core/Classes/LinkHandling/LegacyLinkNotationConverter.php
typo3/sysext/core/Tests/Unit/Database/SoftReferenceIndexTest.php [new file with mode: 0644]
typo3/sysext/core/Tests/Unit/LinkHandling/LegacyLinkNotationConverterTest.php