[HttpKernel] Guard against bad profile data

symfony · Mar 2, 2022 · c265924 · c265924
1 parent 9fb7242
commit c265924
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/Profiler/FileProfilerStorage.php b/Profiler/FileProfilerStorage.php
@@ -123,7 +123,11 @@ public function read($token): ?Profile
             $file = 'compress.zlib://'.$file;
         }
 
-        return $this->createProfileFromData($token, unserialize(file_get_contents($file)));
+        if (!$data = unserialize(file_get_contents($file))) {
+            return null;
+        }
+
+        return $this->createProfileFromData($token, $data);
     }
 
     /**
@@ -297,7 +301,11 @@ protected function createProfileFromData($token, $data, $parent = null)
                 $file = 'compress.zlib://'.$file;
             }
 
-            $profile->addChild($this->createProfileFromData($token, unserialize(file_get_contents($file)), $profile));
+            if (!$childData = unserialize(file_get_contents($file))) {
+                continue;
+            }
+
+            $profile->addChild($this->createProfileFromData($token, $childData, $profile));
         }
 
         return $profile;