public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

Merge pull request #5137 from dzuelke/rfs_conlen 

Fail download on content-length mismatch
pull/5183/head
Jordi Boggiano 2016-04-11 17:03:58 +01:00
parent 592374ea93 5dd4d69a6d
commit 765a958c42
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/Composer/Util/RemoteFilesystem.php
View File

@ -279,6 +279,11 @@ class RemoteFilesystem
try { try {
$result = file_get_contents($fileUrl, false, $ctx); $result = file_get_contents($fileUrl, false, $ctx);
if ($this->bytesMax && strlen($result) < $this->bytesMax) {
// alas, this is not possible via the stream callback because STREAM_NOTIFY_COMPLETED is documented, but not implemented anywhere in PHP
throw new TransportException('Content-Length mismatch');
}
if (PHP_VERSION_ID < 50600 && !empty($options['ssl']['peer_fingerprint'])) { if (PHP_VERSION_ID < 50600 && !empty($options['ssl']['peer_fingerprint'])) {
// Emulate fingerprint validation on PHP < 5.6 // Emulate fingerprint validation on PHP < 5.6
$params = stream_context_get_params($ctx); $params = stream_context_get_params($ctx);