Ticket #31600: 31600-incr_decr_offset_type_check.diff

src/wp-includes/cache.php

@@ -435 +435 @@
                 if ( ! is_numeric( $this->cache[ $group ][ $key ] ) )
                         $this->cache[ $group ][ $key ] = 0;
 
+                if ( ! is_numeric( $offset ) ) {
+                        if ( is_string( $offset ) ) {
+                                $offset = (int) $offset;
+                        } else {
+                                $offset = 0;
+                        }
+                }
+
                 $offset = (int) $offset;
 
                 $this->cache[ $group ][ $key ] -= $offset;
@@ -546 +554 @@
                 if ( ! is_numeric( $this->cache[ $group ][ $key ] ) )
                         $this->cache[ $group ][ $key ] = 0;
 
+                if ( ! is_numeric( $offset ) ) {
+                        if ( is_string( $offset ) ) {
+                                $offset = (int) $offset;
+                        } else {
+                                $offset = 0;
+                        }
+                }
+
                 $offset = (int) $offset;
 
                 $this->cache[ $group ][ $key ] += $offset;