Zend Framework 1 bug: «The locale '' is no known locale»

dmitrii_fediuk · August 8, 2017, 4:54pm

This bug can be reproduced manually with Zend Framework by the following code:

\Zend_Locale::findLocale('non existent')

The bug also can be reproduced in some live Zend Framework based websites, e.g.:
https://bionest-tech.com/payment/?lang=nonexistent

This website is not mine and is not Magento based, I have found it with Google by the «The locale '' is no known locale» query.

Magento 1 and Magento 2 both use Zend Framework 1, so they also vulnerable to this failure.

In my experience, the failure is often encountered in Norwegian websites: may be some Norwegian visitors have some specific locale settings (in a browser on in an operating system), and these settings are wrongly handled by Zend Framework (are absent in the Zend Framework locales dictionary).

The problem method is \Zend_Locale::findLocale:

github.com

zendframework/zf1/blob/release-1.12.20/library/Zend/Locale.php#L1730-L1764


      
          /**
           * Finds the proper locale based on the input
           * Checks if it exists, degrades it when necessary
           * Detects registry locale and when all fails tries to detect a automatic locale
           * Returns the found locale as string
           *
           * @param string $locale
           * @throws Zend_Locale_Exception When the given locale is no locale or the autodetection fails
           * @return string
           */
          public static function findLocale($locale = null)
          {
              if ($locale === null) {
                  require_once 'Zend/Registry.php';
                  if (Zend_Registry::isRegistered('Zend_Locale')) {
                      $locale = Zend_Registry::get('Zend_Locale');
                  }
              }
          
              if ($locale === null) {

This file has been truncated. show original