[HttpKernel] Prevent calling method_exists() with non-string values.

derrabus · derrabus · commit 5b389af7f40a · 2020-05-22T15:23:31.000+02:00
diff --git a/Controller/ControllerResolver.php b/Controller/ControllerResolver.php
@@ -77,7 +77,7 @@ public function getController(Request $request)
             throw new \InvalidArgumentException(sprintf('Controller "%s" for URI "%s" is not callable.', \get_class($controller), $request->getPathInfo()));
         }
 
-        if (false === strpos($controller, ':')) {
+        if (\is_string($controller) && false === strpos($controller, ':')) {
             if (method_exists($controller, '__invoke')) {
                 return $this->instantiateController($controller);
             } elseif (\function_exists($controller)) {

Original file line number	Diff line number	Diff line change
`@@ -77,7 +77,7 @@ public function getController(Request $request)`
`77`	`77`	`throw new \InvalidArgumentException(sprintf('Controller "%s" for URI "%s" is not callable.', \get_class($controller), $request->getPathInfo()));`
`78`	`78`	`}`
`79`	`79`
`80`		`- if (false === strpos($controller, ':')) {`
	`80`	`+ if (\is_string($controller) && false === strpos($controller, ':')) {`
`81`	`81`	`if (method_exists($controller, '__invoke')) {`
`82`	`82`	`return $this->instantiateController($controller);`
`83`	`83`	`} elseif (\function_exists($controller)) {`