[php-src] Issue #8397: crypt() accepts invalid characters in salt
| From: | nikic | Date: | Sun, 24 Apr 2022 15:00:10 +0000 |
| Subject: | [php-src] Issue #8397: crypt() accepts invalid characters in salt | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-241215@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/8397
Comment Author: nikic
@cmb69 It's not obvious on older PHP versions, but PHP currently never uses system crypt.
Historically this didn't happen due to a bug in the config.m4 detection, and now it's
explicitly disabled until a decision to do otherwise is reached.