Prevent require command from allowing a package to require itself, fixes #8247

main
Jordi Boggiano 5 years ago
parent e7051de1a4
commit 1a391b572c
No known key found for this signature in database
GPG Key ID: 7BBD42C429EC80BC

@ -145,7 +145,12 @@ EOT
// validate requirements format
$versionParser = new VersionParser();
foreach ($requirements as $constraint) {
foreach ($requirements as $package => $constraint) {
if (strtolower($package) === $composer->getPackage()->getName()) {
$io->writeError(sprintf('<error>Root package \'%s\' cannot require itself in its composer.json</error>', $package));
return 1;
}
$versionParser->parseConstraints($constraint);
}

Loading…
Cancel
Save