Bug #66797 [Ana->Csd]: mb_substr only takes 32-bit signed integer

Edit report at https://bugs.php.net/bug.php?id=66797&edit=1 ID: 66797 Updated by: cmb@php.net Reported by: astewart at online-buddies dot com Summary: mb_substr only takes 32-bit signed integer -Status: Analyzed +Status: Closed Type: Bug Package: mbstring related Operating System: MacOS 10.9.2; CentOS 6.4 PHP Version: 5.4.25 Assigned To: cmb Block user comment: N Private report: N New Comment: Automatic comment on behalf of cmbecker69@gmx.de Revision: http://git.php.net/?p=php-src.git;a=commit;h=2f10db36af2776f386b7433c5cbfe79e66edd14d Log: Fix #66797: mb_substr only takes 32-bit signed integer Previous Comments: ------------------------------------------------------------------------ [2016-08-30 11:43:13] cmb@php.net Thanks for reporting this issue. The actual problem is that mbfl_substr() defines its from and len parameters to be int. Therefore truncation is possible. ------------------------------------------------------------------------ [2014-02-28 15:40:27] astewart at online-buddies dot com Description: ------------ mb_substr takes an int argument for length, but does not accept all integers on a 64-bit compiled PHP. Instead, the number is treated as -(1<<31), and the string is therefore truncated to zero length. Test script: --------------- <?php assert('"1" == mb_substr("1", 0, PHP_INT_MAX)'); Expected result: ---------------- No output Actual result: -------------- PHP Warning: assert(): Assertion ""1" == mb_substr("1", 0, PHP_INT_MAX)" failed in t.php on line 2 PHP Stack trace: PHP 1. {main}() t.php:0 PHP 2. assert() t.php:2 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=66797&edit=1