#51059 [Asn]: crypt() segfaults on certain salts
ID: 51059
Updated by: pajoye@php.net
Reported By: joey@php.net
Status: Assigned
Bug Type: *Encryption and hash functions
Operating System: Linux, Mac OSX
PHP Version: 5.3.2RC2
Assigned To: pajoye
New Comment:
Jani, I would appreciate if you slightly change the way your comment
bugs, we are not in the Central Station Bar.
Also having a small clue about what has been done (and why) and having
a clue about what we are talking about would be perfect, if not too much
asking.
Previous Comments:
------------------------------------------------------------------------
[2010-02-17 07:36:01] jani@php.net
Yes, and the other is happening with old crypt stuff before Pierre
broke it.
------------------------------------------------------------------------
[2010-02-16 23:14:39] joey@php.net
They seem to be superficially the same, but the bug in this case
couldn't really be SAPI-specific, so either the other report is
factually incorrect, or they're different bugs.
------------------------------------------------------------------------
[2010-02-16 20:18:40] jani@php.net
Quite likely same as bug #50947 ?
------------------------------------------------------------------------
[2010-02-16 17:50:44] joey@php.net
Description:
------------
Prior to 5.3, crypt() would safely handle certain invalid salts. With
the switch to the new DES-based crypt() provider in 5.3, it segfaults.
In discussing this with Pierre, he indicated the problem was in
do_des().
Reproduce code:
---------------
<?php
var_dump(crypt('a', '_'));
Expected result:
----------------
string(13) "_$MoLFnWnJ4yk"
Actual result:
--------------
Segmentation fault
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=51059&edit=1
Thread (7 messages)