#51059 [Asn->Csd]: crypt() segfaults on certain salts

ID: 51059 Updated by: pajoye@php.net Reported By: joey@php.net -Status: Assigned +Status: Closed Bug Type: *Encryption and hash functions Operating System: Linux, Mac OSX PHP Version: 5.3.2RC2 Assigned To: pajoye New Comment: This bug has been fixed in SVN. Snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2010-02-21 18:11:11] svn@php.net Automatic comment from SVN on behalf of pajoye Revision: http://svn.php.net/viewvc/?view=revision&revision=295309 Log: - Fix #51059, crypt can fail and return NULL, on almost all implementations ------------------------------------------------------------------------ [2010-02-16 23:14:39] joey@php.net They seem to be superficially the same, but the bug in this case couldn't really be SAPI-specific, so either the other report is factually incorrect, or they're different bugs. ------------------------------------------------------------------------ [2010-02-16 20:18:40] jani@php.net Quite likely same as bug #50947 ? ------------------------------------------------------------------------ [2010-02-16 17:50:44] joey@php.net Description: ------------ Prior to 5.3, crypt() would safely handle certain invalid salts. With the switch to the new DES-based crypt() provider in 5.3, it segfaults. In discussing this with Pierre, he indicated the problem was in do_des(). Reproduce code: --------------- <?php var_dump(crypt('a', '_')); Expected result: ---------------- string(13) "_$MoLFnWnJ4yk" Actual result: -------------- Segmentation fault ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=51059&edit=1