From 85be003cf5d89c0e3e5e25eb64498c2cdfaa0bc2 Mon Sep 17 00:00:00 2001 From: Alexei Sorokin Date: Fri, 1 Nov 2019 08:29:52 +0300 Subject: [PATCH] [Embed][CORE] hex2bin should always get an even amount of symbols --- lib/media/mediafile.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/media/mediafile.php b/lib/media/mediafile.php index 2eb77c08c6..ffcf1ed866 100644 --- a/lib/media/mediafile.php +++ b/lib/media/mediafile.php @@ -281,6 +281,8 @@ class MediaFile return false; } elseif ($ret === 0) { return null; // No match + } elseif (strlen($matches[2]) % 2 !== 0) { + return null; // An odd length won't do for hex2bin } else { $filename = hex2bin($matches[2]);