#51059 [Asn]: crypt() segfaults on certain salts

ID: 51059 Updated by: jani@php.net Reported By: joey@php.net Status: Assigned Bug Type: *Encryption and hash functions Operating System: Linux, Mac OSX PHP Version: 5.3.2RC2 Assigned To: pajoye New Comment: Yes, and the other is happening with old crypt stuff before Pierre broke it. Previous Comments: ------------------------------------------------------------------------ [2010-02-16 23:14:39] joey@php.net They seem to be superficially the same, but the bug in this case couldn't really be SAPI-specific, so either the other report is factually incorrect, or they're different bugs. ------------------------------------------------------------------------ [2010-02-16 20:18:40] jani@php.net Quite likely same as bug #50947 ? ------------------------------------------------------------------------ [2010-02-16 17:50:44] joey@php.net Description: ------------ Prior to 5.3, crypt() would safely handle certain invalid salts. With the switch to the new DES-based crypt() provider in 5.3, it segfaults. In discussing this with Pierre, he indicated the problem was in do_des(). Reproduce code: --------------- <?php var_dump(crypt('a', '_')); Expected result: ---------------- string(13) "_$MoLFnWnJ4yk" Actual result: -------------- Segmentation fault ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=51059&edit=1