Merge pull request owncloud#11043 from owncloud/test-againstNull

Return false in case the passed values are not of type string
jimcouts · Sep 12, 2014 · cfd8b3f · cfd8b3f
2 parents d6834b6 + 5ff999d
commit cfd8b3f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/private/security/stringutils.php b/lib/private/security/stringutils.php
@@ -25,6 +25,10 @@ class StringUtils {
 	 */
 	public static function equals($expected, $input) {
 
+		if(!is_string($expected) || !is_string($input)) {
+			return false;
+		}
+
 		if(function_exists('hash_equals')) {
 			return hash_equals($expected, $input);
 		}