Bug #73058 [NEW]: crypt broken when salt is 'too' long

From: sjon at hortensius dot net Operating system: PHP version: 7.1.0RC1 Package: hash related Bug Type: Bug Bug description:crypt broken when salt is 'too' long Description: ------------ $pass = 'secret'; $salt = '$2y$07$usesomesillystringforsalt$'; var_dump(crypt($pass, $salt)); * as demonstrated on https://3v4l.org/kuAJO Test script: --------------- * works with shorter salt: https://3v4l.org/O654F * fails with longer salt: https://3v4l.org/dvgnq (includes CRYPT_SALT_LENGTH) Expected result: ---------------- string(60) "$2y$07$usesomesillystringforex.u2VJUMLRWaJNuw0Hu2FvCEimdeYVO" Actual result: -------------- string(2) "*0" -- Edit bug report at https://bugs.php.net/bug.php?id=73058&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=73058&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=73058&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=73058&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=73058&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=73058&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=73058&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=73058&r=needscript Try newer version: https://bugs.php.net/fix.php?id=73058&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=73058&r=support Expected behavior: https://bugs.php.net/fix.php?id=73058&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=73058&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=73058&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=73058&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=73058&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=73058&r=dst IIS Stability: https://bugs.php.net/fix.php?id=73058&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=73058&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=73058&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=73058&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=73058&r=mysqlcfg