Bug #72535 [Ver->Fbk]: arcfour encryption stream filter crashes php

Edit report at https://bugs.php.net/bug.php?id=72535&edit=1 ID: 72535 Updated by: kalle@php.net Reported by: terrafrost at gmail dot com Summary: arcfour encryption stream filter crashes php -Status: Verified +Status: Feedback Type: Bug Package: Reproducible crash Operating System: * PHP Version: 7.0.8 Block user comment: N Private report: N New Comment: Thank you for this bug report. To properly diagnose the problem, we need a backtrace to see what is happening behind the scenes. To find out how to generate a backtrace, please read http://bugs.php.net/bugs-generating-backtrace.php for *NIX and http://bugs.php.net/bugs-generating-backtrace-win32.php for Win32 Once you have generated a backtrace, please submit it to this bug report and change the status back to "Open". Thank you for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2016-07-03 13:07:20] cmb@php.net I can reproduce the crash with PHP 5.6.23, PHP 7.0.8 and PHP 7.1.0alpha2 on Windows. A debug build of current master on Linux reports 2 memory leaks. ------------------------------------------------------------------------ [2016-07-03 05:55:29] terrafrost at gmail dot com Description: ------------ I don't think encryption filters are a very well known feature of mcrypt but none-the-less they are a feature: http://php.net/manual/en/filters.encryption.php The example in the PHP docs (with tripledes) works but arcfour does not work - you try to run it and you get a segfault. Test script: --------------- <?php $passphrase = 'My secret'; $plaintext = 'Secret secret secret data'; $iv = substr(md5('iv' . $passphrase, true), 0, 8); $key = substr(md5('pass1' . $passphrase, true) . md5('pass2' . $passphrase, true), 0, 24); $opts = array('iv' => $iv, 'key' => $key, 'mode' => 'stream'); $expected = substr($plaintext . $plaintext, 0, 48); $fp = fopen('php://memory', 'wb+'); stream_filter_append($fp, 'mcrypt.arcfour', STREAM_FILTER_WRITE, $opts); fwrite($fp, $plaintext); Expected result: ---------------- The script to actually run Actual result: -------------- The script crashes ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=72535&edit=1