Skip to content

Upgrade/Install: Load the .maintenance file non-fatally - #13180

Open
itzmekhokan wants to merge 1 commit into
WordPress:trunkfrom
itzmekhokan:fix/65911-maintenance-file-race
Open

Upgrade/Install: Load the .maintenance file non-fatally#13180
itzmekhokan wants to merge 1 commit into
WordPress:trunkfrom
itzmekhokan:fix/65911-maintenance-file-race

Conversation

@itzmekhokan

Copy link
Copy Markdown

After a successful update, WordPress can end the request with Uncaught Error: Failed opening required '.maintenance' from wp-includes/load.php.

wp_is_maintenance_mode() and WP_Automatic_Updater::has_fatal_error() both check for the file with file_exists() and then load it with require. A concurrent request can delete it in between, and with opcache.enable_file_override=1 the cached script entry keeps file_exists() returning true after the deletion, so require fails fatally. Both now load the file with include and bail when it returns false.

The file_exists() fast path is kept deliberately: suppressed warnings are still dispatched to custom error handlers, so loading unconditionally would add two per request on every site.

Trac ticket: https://core.trac.wordpress.org/ticket/65911

Use of AI Tools

AI assistance: Yes
Tool(s): Claude Code
Model(s): Claude Opus 5
Used for: Reproducing the failure shape, drafting the patch, and adding a regression test. All changes were reviewed and validated by me.


This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See GitHub Pull Requests for Code Review in the Core Handbook for more details.

`wp_is_maintenance_mode()` and `WP_Automatic_Updater::has_fatal_error()`
both check for `.maintenance` with `file_exists()` and then load it with
`require`. An update running in a concurrent request can delete the file
between the two, and with `opcache.enable_file_override=1` the cached
script entry keeps `file_exists()` returning true after the deletion, so
`require` fails and terminates the request.

Load the file with `include` and bail when it returns false, so a file
that disappears or becomes unreadable between the check and the load
leaves maintenance mode off instead of ending the request.

Fixes #65911.
@github-actions

Copy link
Copy Markdown

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

Core Committers: Use this line as a base for the props when committing in SVN:

Props khokansardar.

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

@github-actions

Copy link
Copy Markdown

Test using WordPress Playground

The changes in this pull request can previewed and tested using a WordPress Playground instance.

WordPress Playground is an experimental project that creates a full WordPress instance entirely within the browser.

Some things to be aware of

  • All changes will be lost when closing a tab with a Playground instance.
  • All changes will be lost when refreshing the page.
  • A fresh instance is created each time the link below is clicked.
  • Every time this pull request is updated, a new ZIP file containing all changes is created. If changes are not reflected in the Playground instance,
    it's possible that the most recent build failed, or has not completed. Check the list of workflow runs to be sure.

For more details about these limitations and more, check out the Limitations page in the WordPress Playground documentation.

Test this pull request with WordPress Playground.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant