Ensure link can be read before checking it is a directory (#2639)

guzzle · May 16, 2020 · 223b0fe · 223b0fe
1 parent 1be851e
commit 223b0fe
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/Handler/CurlFactory.php b/src/Handler/CurlFactory.php
@@ -359,8 +359,14 @@ private function applyHandlerOptions(EasyHandle $easy, array &$conf): void
                     }
                     // If it's a directory or a link to a directory use CURLOPT_CAPATH.
                     // If not, it's probably a file, or a link to a file, so use CURLOPT_CAINFO.
-                    if (\is_dir($options['verify']) ||
-                        (\is_link($options['verify']) && \is_dir(\readlink($options['verify'])))) {
+                    if (
+                        \is_dir($options['verify']) ||
+                        (
+                            \is_link($options['verify']) === true &&
+                            ($verifyLink = \readlink($options['verify'])) !== false &&
+                            \is_dir($verifyLink)
+                        )
+                    ) {
                         $conf[CURLOPT_CAPATH] = $options['verify'];
                     } else {
                         $conf[CURLOPT_CAINFO] = $options['verify'];