From 95e091c921037b7b6564942845e7b738f6b95c9c Mon Sep 17 00:00:00 2001
From: Jordi Boggiano <j.boggiano@seld.be>
Date: Fri, 29 Sep 2023 10:15:51 +0200
Subject: [PATCH] Merge pull request from GHSA-jm6m-4632-36hf

---
 bin/composer | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/composer b/bin/composer
index 55391b9b6..5a46937ca 100755
--- a/bin/composer
+++ b/bin/composer
@@ -2,6 +2,11 @@
 <?php
 
 if (PHP_SAPI !== 'cli' && PHP_SAPI !== 'phpdbg') {
+    if (0 === strpos(__FILE__, 'phar:') && ini_get('register_argc_argv')) {
+        echo 'Composer cannot be run safely on non-CLI SAPIs with register_argc_argv=On. Aborting.'.PHP_EOL;
+        exit(1);
+    }
+
     echo 'Warning: Composer should be invoked via the CLI version of PHP, not the '.PHP_SAPI.' SAPI'.PHP_EOL;
 }