Commit4cc37df

committed

security #cve-2019-18889 [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances (nicolas-grekas)

This PR was merged into the 3.4 branch.

2 parentsb21025b +1507413 commit4cc37dfCopy full SHA for 4cc37df

File tree

+20

-0

lines changed

+20

-0

lines changed

Lines changed: 10 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -275,6 +275,16 @@ public function commit()`
`275`	`275`	`return$ok;`
`276`	`276`	`}`
`277`	`277`
	`278`	`+publicfunction__sleep()`
	`279`	`+ {`
	`280`	`+thrownew \BadMethodCallException('Cannot serialize'.__CLASS__);`
	`281`	`+ }`
	`282`	`+`
	`283`	`+publicfunction__wakeup()`
	`284`	`+ {`
	`285`	`+thrownew \BadMethodCallException('Cannot unserialize'.__CLASS__);`
	`286`	`+ }`
	`287`	`+`
`278`	`288`	`publicfunction__destruct()`
`279`	`289`	`{`
`280`	`290`	`if ($this->deferred) {`

Lines changed: 10 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -282,6 +282,16 @@ public function commit()`
`282`	`282`	`return$this->invalidateTags([]);`
`283`	`283`	`}`
`284`	`284`
	`285`	`+publicfunction__sleep()`
	`286`	`+ {`
	`287`	`+thrownew \BadMethodCallException('Cannot serialize'.__CLASS__);`
	`288`	`+ }`
	`289`	`+`
	`290`	`+publicfunction__wakeup()`
	`291`	`+ {`
	`292`	`+thrownew \BadMethodCallException('Cannot unserialize'.__CLASS__);`
	`293`	`+ }`
	`294`	`+`
`285`	`295`	`publicfunction__destruct()`
`286`	`296`	`{`
`287`	`297`	`$this->commit();`

Comments

(0)