Bug #77646 [Csd]: sodium_crypto_sign_detached() does not zero-terminate signature

From: Date: Thu, 21 Feb 2019 15:24:50 +0000
Subject: Bug #77646 [Csd]: sodium_crypto_sign_detached() does not zero-terminate signature
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-219682@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=77646&edit=1 ID: 77646 Updated by: jedisct1@php.net Reported by: thomaswouters+bugs dot php dot net at gmail dot com Summary: sodium_crypto_sign_detached() does not zero-terminate signature Status: Closed Type: Bug Package: *Encryption and hash functions Operating System: Linux PHP Version: 7.3.2 Assigned To: jedisct1 Block user comment: N Private report: N New Comment: Thanks for your report, Thomas! This has been fixed in version 2.0.21 on the PECL extension, as well as in the PHP source code. Thanks again! Previous Comments: ------------------------------------------------------------------------ [2019-02-21 15:22:02] jedisct1@php.net Automatic comment on behalf of github@pureftpd.org Revision: http://git.php.net/?p=php-src.git;a=commit;h=e7ca69f1fa6b7e7b63f40080b1a6cea3a071b034 Log: Fix bug #77646 ------------------------------------------------------------------------ [2019-02-21 15:20:09] jedisct1@php.net Automatic comment on behalf of github@pureftpd.org Revision: http://git.php.net/?p=php-src.git;a=commit;h=e7ca69f1fa6b7e7b63f40080b1a6cea3a071b034 Log: Fix bug #77646 ------------------------------------------------------------------------ [2019-02-21 15:14:50] jedisct1@php.net Automatic comment on behalf of github@pureftpd.org Revision: http://git.php.net/?p=php-src.git;a=commit;h=e7ca69f1fa6b7e7b63f40080b1a6cea3a071b034 Log: Fix bug #77646 ------------------------------------------------------------------------ [2019-02-21 15:11:04] jedisct1@php.net Automatic comment on behalf of github@pureftpd.org Revision: http://git.php.net/?p=php-src.git;a=commit;h=ad3dac378e019590855c462ac69d1bda421520bb Log: Fix bug #77646 ------------------------------------------------------------------------ [2019-02-21 13:19:28] thomaswouters+bugs dot php dot net at gmail dot com Test script should have been: <?php $alice_sk = base64_decode('NNiJwjbkZ/5zUEj8KW8HENU34RVZ22XmvqFLj2xhlUa6ht6V6u/t97mfF6hW8UQgEvOdA/JSz/grVFVxoM5Y5g=='); $message = 'This is a test message.'; $signature = sodium_crypto_sign_detached($message, $alice_sk); var_dump(base64_encode($signature)); ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=77646 -- Edit this bug report at https://bugs.php.net/bug.php?id=77646&edit=1

« previous php.bugs (#219682) next »