From b3873a81972df5684e8aab1be3a77ffcd17d5469 Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Tue, 4 Aug 2015 13:50:24 +0000 Subject: [PATCH] (legacy) crashreport, fix some input validation --- src/etc/inc/auth.inc | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/src/etc/inc/auth.inc b/src/etc/inc/auth.inc index 9ef5cc081..4c9bb3e4d 100644 --- a/src/etc/inc/auth.inc +++ b/src/etc/inc/auth.inc @@ -213,8 +213,10 @@ function index_groups() if (isset($config['system']['group'])) { $i = 0; foreach($config['system']['group'] as $groupent) { - $groupindex[$groupent['name']] = $i; - $i++; + if (isset($groupent['name'])) { + $groupindex[$groupent['name']] = $i; + $i++; + } } } @@ -600,6 +602,10 @@ function local_group_del_user($user) function local_group_set($group, $reset = false) { + if (!isset($group['name']) || !isset($group['gid'])) { + // input data invalid + return false; + } $group_name = $group['name']; $group_gid = $group['gid']; $group_members = '';