[RSS Feed/News] XF\Reaction\AbstractHandler::updateContentReactions no check for deleted reactions

[XenForo]

Every other location which touches container('reactions') guards against the reaction id being tested against actually exists in the cache. This appears to be the only place which doesn't.

This can result in a race condition between a post reaction cache being rebuilt and the reactions container cache being rebuilt.
PHP:

if ($scoreField)
{
   $reactionsCache = \XF::app()->container('reactions');
   $score = 0;
   foreach ($counts AS $reactionId => $count)
   {
      $reaction =...

Read more

ادامه مطلب...