view core/lib/Drupal/Component/ClassFinder/ClassFinder.php @ 13:5fb285c0d0e3

Update Drupal core to 8.4.7 via Composer. Security update; I *think* we've
been lucky to get away with this so far, as we don't support self-registration
which seems to be used by the so-called "drupalgeddon 2" attack that 8.4.5
was vulnerable to.

<?php

namespace Drupal\Component\ClassFinder;

use Doctrine\Common\Reflection\ClassFinderInterface;

/**
 * A Utility class that uses active autoloaders to find a file for a class.
 */
class ClassFinder implements ClassFinderInterface {

  /**
   * {@inheritdoc}
   */
  public function findFile($class) {
    $loaders = spl_autoload_functions();
    foreach ($loaders as $loader) {
      if (is_array($loader) && isset($loader[0]) && is_object($loader[0]) && method_exists($loader[0], 'findFile')) {
        $file = call_user_func_array([$loader[0], 'findFile'], [$class]);
        // Different implementations return different empty values. For example,
        // \Composer\Autoload\ClassLoader::findFile() returns FALSE whilst
        // \Doctrine\Common\Reflection\ClassFinderInterface::findFile()
        // documents that a NULL should be returned.
        if (!empty($file)) {
          return $file;
        }
      }
    }
    return NULL;
  }

}