Drupal 7.x uses TYPO3/phar-stream-wrapper package as a fix for the recent Phar security vulnerabilities discovered.

The version we bundle with Drupal core is outdated, and on PHP 7.4, it triggers a PHP notice due to that library access string offsets using the curly brace syntax. In PHP 7.4, $str{0} is discourage.

The ideal solution would be to upgrade the library, but due to slow-moving nature, I would like to submit a patch (a remake of this). More info on the notice is also at https://php.watch/versions/7.4/deprecated-string-array-index.

CommentFileSizeAuthor
#2 drupal-7-x-typo3-string-curl-brace-deprecation--3097405.patch665 bytesayesh

Comments

Ayesh created an issue. See original summary.

ayesh’s picture

ayesh commented
StatusFileSize
new drupal-7-x-typo3-string-curl-brace-deprecation--3097405.patch665 bytes
ayesh’s picture

ayesh commented
Status: Active » Closed (duplicate)
Related issues: +#3085098: PHP Phar Stream Wrapper should be updated (PHP7.4 support, drop fileinfo dependency)