Bug #77454 [Asn->Csd]: mb_scrub() silently truncates after a null byte

Edit report at https://bugs.php.net/bug.php?id=77454&edit=1 ID: 77454 Updated by: nikic@php.net Reported by: 64796c6e69 at gmail dot com Summary: mb_scrub() silently truncates after a null byte -Status: Assigned +Status: Closed Type: Bug Package: mbstring related Operating System: any PHP Version: master-Git-2019-01-13 (Git) Assigned To: nikic Block user comment: N Private report: N New Comment: Automatic comment on behalf of nikita.ppv@gmail.com Revision: http://git.php.net/?p=php-src.git;a=commit;h=3ad0ebdf5cdc6dbe077685907d012eaeac7ea6e4 Log: Fixed bug #77454 Previous Comments: ------------------------------------------------------------------------ [2019-01-13 16:31:44] 64796c6e69 at gmail dot com Updating OS. ------------------------------------------------------------------------ [2019-01-13 16:27:15] 64796c6e69 at gmail dot com Description: ------------ mb_scrub() silently truncates anything after a null byte in a string. This bug has existed since the function was created. The arguments are read correctly, but the returned value ignores the length: https://github.com/php/php-src/blob/30668755b64aa732246d952451f89d1fcfe581f0/ext/mbstring/mbstring.c#L4990 Test script: --------------- <?php $str = "before\0after"; var_dump(mb_scrub($str, 'latin1')); var_dump(mb_scrub($str, 'utf-8')); var_dump(mb_scrub($str, 'ascii')); Expected result: ---------------- There should be a null byte in each of these. string(12) "beforeafter" string(12) "beforeafter" string(12) "beforeafter" Actual result: -------------- string(6) "before" string(6) "before" string(6) "before" ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=77454&edit=1