There are several places in the code where realpath() is used without verifying that it didn't return false despite the two cases where realpath returns false:

realpath() returns FALSE on failure, e.g. if the file does not exist.

The running script must have executable permissions on all
directories in the hierarchy, otherwise realpath() will return FALSE.

The permission bit caused bug #44132.

Version: 1.21.x
Severity: normal