upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-12 18:21:40 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 21

Merge pull request #59979 from elicpeter/patch-1

Browse source 
fix(repair): restrict unserialize() in RemoveBrokenProperties
This commit is contained in:
Louis 2026-06-11 10:26:04 +02:00 committed by GitHub
commit 421e4de7e5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/private/Repair/RemoveBrokenProperties.php
View file

@ -38,7 +38,7 @@ class RemoveBrokenProperties implements IRepairStep {
$brokenIds = [];
while ($entry = $result->fetch()) {
if (!empty($entry['propertyvalue'])) {
$object = @unserialize(str_replace('\x00', chr(0), $entry['propertyvalue']));
$object = @unserialize(str_replace('\x00', chr(0), $entry['propertyvalue']), ['allowed_classes' => false]);
if ($object === false) {
$brokenIds[] = $entry['id'];
}