mirror/Part-DB.Part-DB-server
1
0
Fork 1
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2025-06-22 09:53:35 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed infinite loop during deserialization on attachment PATCH operations

Browse source
This commit is contained in:
Jan Böhmer 2024-03-03 17:58:25 +01:00
parent 3734541743
commit 0824e11570
1 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

13
src/Serializer/APIPlatform/DetermineTypeFromElementIRIDenormalizer.php
View file

@ -48,6 +48,8 @@ class DetermineTypeFromElementIRIDenormalizer implements DenormalizerInterface,
use DenormalizerAwareTrait; use DenormalizerAwareTrait;
private const ALREADY_CALLED = self::class . '::ALREADY_CALLED';
public function __construct(private readonly IriConverterInterface $iriConverter, private readonly ResourceMetadataCollectionFactoryInterface $resourceMetadataCollectionFactory) public function __construct(private readonly IriConverterInterface $iriConverter, private readonly ResourceMetadataCollectionFactoryInterface $resourceMetadataCollectionFactory)
{ {
} }
@ -94,13 +96,18 @@ class DetermineTypeFromElementIRIDenormalizer implements DenormalizerInterface,
$data = $this->addTypeDiscriminatorIfNecessary($data, $context['operation']); $data = $this->addTypeDiscriminatorIfNecessary($data, $context['operation']);
} }
$context[self::ALREADY_CALLED] = true;
return $this->denormalizer->denormalize($data, $type, $format, $context); return $this->denormalizer->denormalize($data, $type, $format, $context);
} }
public function supportsDenormalization(mixed $data, string $type, ?string $format = null) public function supportsDenormalization(mixed $data, string $type, ?string $format = null, array $context = [])
{ {
//Only denormalize if the _type discriminator is not set and the class is supported //Only denormalize if the _type discriminator is not set and the class is supported and we not have already called this function
return is_array($data) && !isset($data['_type']) && in_array($type, self::SUPPORTED_CLASSES, true); return !isset($context[self::ALREADY_CALLED])
&& is_array($data)
&& !isset($data['_type'])
&& in_array($type, self::SUPPORTED_CLASSES, true);
} }
public function getSupportedTypes(?string $format): array public function getSupportedTypes(?string $format): array