•  
      request #43698 Crash when accessing the password reset confirmation page without parameters
    Infos
    #43698
    Thomas Gerbet (tgerbet)
    2025-07-22 14:46
    2025-07-08 09:34
    45389
    Details
    Crash when accessing the password reset confirmation page without parameters

    Reproduction scenario:

    1. Access GET /account/lostlogin.php

    Trace:

    Fatal error: Uncaught TypeError: Tuleap\Cryptography\ConcealedString::__construct(): Argument #1 ($value) must be of type string, false given, called in /usr/share/tuleap/src/common/User/Account/LostPassword/DisplayResetPasswordController.php on line 58 and defined in /usr/share/tuleap/src/common/Cryptography/ConcealedString.php:32
    Stack trace:
    #0 /usr/share/tuleap/src/common/User/Account/LostPassword/DisplayResetPasswordController.php(58): Tuleap\Cryptography\ConcealedString->__construct()
    #1 /usr/share/tuleap/src/common/Request/FrontRouter.php(241): Tuleap\User\Account\LostPassword\DisplayResetPasswordController->process()
    #2 /usr/share/tuleap/src/common/Request/FrontRouter.php(98): Tuleap\Request\FrontRouter->routeHandler()
    #3 /usr/share/tuleap/src/www/index.php(50): Tuleap\Request\FrontRouter->route()
    #4 {main} thrown in /usr/share/tuleap/src/common/Cryptography/ConcealedString.php on line 32
    
    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2025-07-08
    Attachments
    Empty
    References

    Follow-ups