Merge pull request #41539 from nextcloud/backport/37959/stable27

[stable27] Check for open_basedir before reading /proc
nextcloud · Nov 16, 2023 · ec84b5c · ec84b5c
2 parents 4fe9738 + febc24d
commit ec84b5c
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/lib/private/Preview/Generator.php b/lib/private/Preview/Generator.php
@@ -263,9 +263,15 @@ public static function unguardWithSemaphore(false|\SysvSemaphore $semId): bool {
 	 */
 	public static function getHardwareConcurrency(): int {
 		static $width;
+
 		if (!isset($width)) {
-			if (is_file("/proc/cpuinfo")) {
-				$width = substr_count(file_get_contents("/proc/cpuinfo"), "processor");
+			if (function_exists('ini_get')) {
+				$openBasedir = ini_get('open_basedir');
+				if (empty($openBasedir) || strpos($openBasedir, '/proc/cpuinfo') !== false) {
+					$width = is_readable('/proc/cpuinfo') ? substr_count(file_get_contents('/proc/cpuinfo'), 'processor') : 0;
+				} else {
+					$width = 0;
+				}
 			} else {
 				$width = 0;
 			}