Ticket #16956: 16956.diff

wp-includes/capabilities.php

@@ -1007 +1007 @@
                 }
 
                 $post_type = get_post_type_object( $post->post_type );
+                
+                if ( is_null( $post_type ) ) {
+                        $caps[] = 'do_not_allow';
+                        break;
+                }
 
                 if ( ! $post_type->map_meta_cap ) {
                         $caps[] = $post_type->cap->$cap;
@@ -1057 +1062 @@
                 }
 
                 $post_type = get_post_type_object( $post->post_type );
+                
+                if ( is_null( $post_type ) ) {
+                        $caps[] = 'do_not_allow';
+                        break;
+                }
 
                 if ( ! $post_type->map_meta_cap ) {
                         $caps[] = $post_type->cap->$cap;
@@ -1105 +1115 @@
                 }
 
                 $post_type = get_post_type_object( $post->post_type );
+                
+                if ( is_null( $post_type ) ) {
+                        $caps[] = 'do_not_allow';
+                        break;
+                }
 
                 if ( ! $post_type->map_meta_cap ) {
                         $caps[] = $post_type->cap->$cap;
@@ -1140 +1155 @@
         case 'add_post_meta':
                 $post = get_post( $args[0] );
                 $post_type_object = get_post_type_object( $post->post_type );
+
+                if ( is_null( $post_type_object ) ) {
+                        $caps[] = 'do_not_allow';
+                        break;
+                }
+                
                 $caps = map_meta_cap( $post_type_object->cap->edit_post, $user_id, $post->ID );
 
                 $meta_key = isset( $args[ 1 ] ) ? $args[ 1 ] : false;
@@ -1157 +1178 @@
                 $post = get_post( $comment->comment_post_ID );
                 $post_type_object = get_post_type_object( $post->post_type );
 
+                if ( is_null( $post_type_object ) ) {
+                        $caps[] = 'do_not_allow';
+                        break;
+                }
+
                 $caps = map_meta_cap( $post_type_object->cap->edit_post, $user_id, $post->ID );
                 break;
         case 'unfiltered_upload':