ZF-10547: Zend_OpenId_Consumer_Storage_File::purgeNonces() foreach on glob() without checking for null


482: foreach (glob($this->dir . '/nonce*') as $name) { 483: @unlink($name);

491: foreach (glob($this->dir . '/nonce*') as $name) { 492: if (filemtime($name) < $time) { 493: @unlink($name);

On some systems (for example with open_basedir) glob() might return NULL instead of empty array. Output from glob() needs to be checked before calling foreach, or casted to ( (array) glob() ).


Fixed in trunk and 1.11 release branch; thanks for the report!