[wp-trac] [WordPress Trac] #41738: Customize: Potential cache corruption when finding changeset post by UUID

WordPress Trac noreply at wordpress.org
Mon Aug 28 00:56:22 UTC 2017


#41738: Customize: Potential cache corruption when finding changeset post by UUID
--------------------------+-----------------------------
 Reporter:  dlh           |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Customize     |    Version:  4.7
 Severity:  normal        |   Keywords:  has-patch
  Focuses:                |
--------------------------+-----------------------------
 `WP_Customize_Manager::find_changeset_post_id()` accepts any `$uuid`, but
 it uses the UUID assigned to the manager as the key when caching the found
 post ID.

 The attached patch updates the tests for `find_changeset_post_id()` to
 demonstrate the issue and includes a fix.

 Note that it would also be possible to fix this bug as part of #40527, for
 which I almost have a patch. But I'm filing this ticket separately in case
 #40527 doesn't happen as soon as planned for whatever reason.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/41738>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list