Skip to content

Fix session_start() leaving the session active when the user gc() throws - #3075

Open
lacatoire wants to merge 1 commit into
masterfrom
fix/session-start-gc-exception
Open

lacatoire wants to merge 1 commit into
masterfrom
fix/session-start-gc-exception

Conversation

@lacatoire

Copy link
Copy Markdown
Owner

When the user gc() handler threw during session_start(), the session stayed active: the data was decoded without running __unserialize() and __wakeup() (an exception is pending), then written back at the end of the request over the stored data.

Abort the session and fail the initialization, as open(), read() and create_sid() do.

Fixes: #2996

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant