Ticket #39774: 39774.patch

src/wp-includes/functions.php

@@ -2063 +2063 @@
 
                         // Check for both lower and upper case extension or image sub-sizes may be overwritten.
                         while ( file_exists($dir . "/$filename") || file_exists($dir . "/$filename2") ) {
-                                $new_number = $number + 1;
+                                $new_number = (int) $number + 1;
                                 $filename = str_replace( array( "-$number$ext", "$number$ext" ), "-$new_number$ext", $filename );
                                 $filename2 = str_replace( array( "-$number$ext2", "$number$ext2" ), "-$new_number$ext2", $filename2 );
                                 $number = $new_number;
@@ -2083 +2083 @@
                 }
 
                 while ( file_exists( $dir . "/$filename" ) ) {
+                        $new_number = (int) $number + 1;
                         if ( '' == "$number$ext" ) {
-                                $filename = "$filename-" . ++$number;
+                                $filename = "$filename-" . $new_number;
                         } else {
-                                $filename = str_replace( array( "-$number$ext", "$number$ext" ), "-" . ++$number . $ext, $filename );
+                                $filename = str_replace( array( "-$number$ext", "$number$ext" ), "-" . $new_number . $ext, $filename );
                         }
+                        $number = $new_number;
                 }
         }