Only get freezedata on found contests

vmcj · vmcj · commit 9db2edcda92a · 2025-05-07T05:33:30.000Z
We can't do a normal $contest==null check as that might leak information
if someone doesn't have access.
diff --git a/webapp/src/Controller/API/ContestController.php b/webapp/src/Controller/API/ContestController.php
@@ -364,7 +364,7 @@ public function problemsetAction(Request $request, string $cid): Response
 
         $hasAccess = $this->dj->checkrole('jury') ||
             $this->dj->checkrole('api_reader') ||
-            $contest->getFreezeData()->started();
+            $contest?->getFreezeData()->started();
 
         if (!$hasAccess) {
             throw new AccessDeniedHttpException();
