Skip to content

Commit 89d0dc2

Browse files
validate result of unserialize before continueing
1 parent ba21e19 commit 89d0dc2

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

src/class-aggregator.php

+4-1
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,10 @@ public static function run(): void
6363
continue;
6464
}
6565

66-
$params = \unserialize($line);
66+
$params = \unserialize($line, ['allowed_classes' => false]);
67+
if (! \is_array($params)) {
68+
error_log('Koko Analytics: unserialize error encountered while processing line in buffer file');
69+
}
6770
$type = \array_shift($params);
6871

6972
// core aggregator

0 commit comments

Comments
 (0)