bug #45610 [HttpKernel] Guard against bad profile data (nicolas-grekas)

nicolas-grekas · nicolas-grekas · commit 6ef994c981c8 · 2022-03-02T13:37:08.000+01:00
This PR was merged into the 4.4 branch. Discussion ---------- [HttpKernel] Guard against bad profile data | Q | A | ------------- | --- | Branch? | 4.4 | Bug fix? | yes | New feature? | no | Deprecations? | no | Tickets | Fix #45606 | License | MIT | Doc PR | - Commits ------- f4a2089 [HttpKernel] Guard against bad profile data
diff --git a/src/Symfony/Component/HttpKernel/Profiler/FileProfilerStorage.php b/src/Symfony/Component/HttpKernel/Profiler/FileProfilerStorage.php
@@ -123,7 +123,11 @@ public function read($token): ?Profile
             $file = 'compress.zlib://'.$file;
         }
 
-        return $this->createProfileFromData($token, unserialize(file_get_contents($file)));
+        if (!$data = unserialize(file_get_contents($file))) {
+            return null;
+        }
+
+        return $this->createProfileFromData($token, $data);
     }
 
     /**
@@ -297,7 +301,11 @@ protected function createProfileFromData($token, $data, $parent = null)
                 $file = 'compress.zlib://'.$file;
             }
 
-            $profile->addChild($this->createProfileFromData($token, unserialize(file_get_contents($file)), $profile));
+            if (!$childData = unserialize(file_get_contents($file))) {
+                continue;
+            }
+
+            $profile->addChild($this->createProfileFromData($token, $childData, $profile));
         }
 
         return $profile;
