Req #67939 [Opn->Wfx]: hash_equals: Don't leak length difference (PR #792)

Edit report at https://bugs.php.net/bug.php?id=67939&edit=1 ID: 67939 Updated by: nikic@php.net Reported by: dunglas at gmail dot com Summary: hash_equals: Don't leak length difference (PR #792) -Status: Open +Status: Wont fix Type: Feature/Change Request Package: hash related PHP Version: 5.6.0 Block user comment: N Private report: N New Comment: Marking as won't fix based on the decision in the linked PR. Previous Comments: ------------------------------------------------------------------------ [2014-08-31 00:32:14] dunglas at gmail dot com PR reopened against the 5.6 branch: https://github.com/php/php-src/pull/791 ------------------------------------------------------------------------ [2014-08-31 00:25:29] dunglas at gmail dot com Description: ------------ https://github.com/php/php-src/pull/791 hash_equals leaks difference in length of compared strings (this is a documented behavior). This implementation ported from Symfony don't. The discussion started in a try to use hash_equals in Symfony: symfony/symfony#11797 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=67939&edit=1