[HttpFoundation] Check if data passed to SessionBagProxy::initialize is an array

mynameisbogdan · nicolas-grekas · commit 233f40cbebd5 · 2019-10-02T18:15:21.000+02:00
diff --git a/Session/Storage/NativeSessionStorage.php b/Session/Storage/NativeSessionStorage.php
@@ -430,7 +430,7 @@ protected function loadSession(array &$session = null)
 
         foreach ($bags as $bag) {
             $key = $bag->getStorageKey();
-            $session[$key] = isset($session[$key]) ? $session[$key] : [];
+            $session[$key] = isset($session[$key]) && \is_array($session[$key]) ? $session[$key] : [];
             $bag->initialize($session[$key]);
         }
 

Original file line number	Diff line number	Diff line change
`@@ -430,7 +430,7 @@ protected function loadSession(array &$session = null)`
`430`	`430`
`431`	`431`	`foreach ($bags as $bag) {`
`432`	`432`	`$key = $bag->getStorageKey();`
`433`		`- $session[$key] = isset($session[$key]) ? $session[$key] : [];`
	`433`	`+ $session[$key] = isset($session[$key]) && \is_array($session[$key]) ? $session[$key] : [];`
`434`	`434`	`$bag->initialize($session[$key]);`
`435`	`435`	`}`
`436`	`436`