Bug #77297 [Opn]: SodiumException segfaults on PHP 7.3
| From: | security at paragonie dot com | Date: | Fri, 14 Dec 2018 00:24:01 +0000 |
| Subject: | Bug #77297 [Opn]: SodiumException segfaults on PHP 7.3 | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-218439@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=77297&edit=1
ID: 77297
User updated by: security at paragonie dot com
Reported by: security at paragonie dot com
-Summary: sodium_memzero() segfaults on PHP 7.3
+Summary: SodiumException segfaults on PHP 7.3
Status: Open
Type: Bug
Package: Reproducible crash
PHP Version: 7.3.0
Block user comment: N
Private report: N
New Comment:
Sorry, got my wires crossed on the actual cause. Earlier I suspected memzero and wrote the wrong
thing in the ticket title.
Previous Comments:
------------------------------------------------------------------------
[2018-12-14 00:21:50] security at paragonie dot com
Description:
------------
Reported to the libsodium-php repository too. Just wanted to make sure the PHP team is aware of the
issue and hopefully can include the fix in 7.3.1.
https://github.com/jedisct1/libsodium-php/issues/186
https://github.com/jedisct1/libsodium-php/pull/187
Test script:
---------------
<?php
function foo()
{
throw new SodiumException('test');
}
foo();
Expected result:
----------------
PHP Fatal error: Uncaught SodiumException: test in /home/scott/sodium_compat/segfault.php:5
Stack trace:
#0 /home/scott/sodium_compat/segfault.php(7): foo()
#1 {main}
thrown in /home/scott/sodium_compat/segfault.php on line 5
Actual result:
--------------
Segmentation fault (core dumped)
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=77297&edit=1