diff vendor/zendframework/zend-diactoros/src/Stream.php @ 13:5fb285c0d0e3

Update Drupal core to 8.4.7 via Composer. Security update; I *think* we've
been lucky to get away with this so far, as we don't support self-registration
which seems to be used by the so-called "drupalgeddon 2" attack that 8.4.5
was vulnerable to.

--- a/vendor/zendframework/zend-diactoros/src/Stream.php	Fri Feb 23 15:52:07 2018 +0000
+++ b/vendor/zendframework/zend-diactoros/src/Stream.php	Mon Apr 23 09:33:26 2018 +0100
@@ -103,7 +103,11 @@
         }
 
         $stats = fstat($this->resource);
-        return $stats['size'];
+        if ($stats !== false) {
+            return $stats['size'];
+        }
+
+        return null;
     }
 
     /**