Jetpack reports "malicious code pattern" in Container.php file

[Benjamine Heath]

Hi,

I received this notification from my Jetpack plugin:

The file Container.php contains a malicious code pattern
Threat found (PHP_Generic_BadPattern_5)

This code pattern is often used to run a very dangerous shell program on your server. The code in these files needs to be reviewed, and possibly cleaned.

/srv/htdocs/wp-content/plugins/event-organiser-pro/lib/Pimple/Container.php

$extended = function ($c) use ($callable, $factory) {
return $callable($factory($c), $c);
};

Can you offer any advice on this?

Thanks,

Ben

[Stephen Harris]

Hi Ben,

The code is safe, and the warning is a false positive. It comes from the Pimple library which is used by the plug-in to provide dependency injection.

It appears that Event Organiser isn’t the only plug-in to be caught by this: https://wordpress.org/support/topic/php-generic-badpattern-5-warning-in-pimple-container/

[Benjamine Heath]

Understood! Thanks for the clarification on this.

[Author]

Posts