Changeset 61935

Timestamp:

03/11/2026 01:32:39 PM (2 days ago)

Author:

johnbillion

Message:

Filesystem API: Don't attempt to extract invalid files from a zip when using the PclZip library.

This brings the handling inline with the same guard condition in _unzip_file_ziparchive() with ZipArchive.

Merges [61887] into the 6.9 branch.

Props johnbillion, peterwilsoncc, xknown.

Location:

branches/6.9

Files:

• . (modified) (1 prop)
• src/wp-admin/includes/file.php (modified) (1 diff)

branches/6.9/src/wp-admin/includes/file.php

@@ -1902 +1902 @@
         }
 
+        // Don't extract invalid files:
+        if ( 0 !== validate_file( $file['filename'] ) ) {
+            continue;
+        }
+
         $uncompressed_size += $file['size'];