Bug #14456 Updated: mcrypt_create_iv: unterminated string & segfault
| From: | sniper@php.net | Date: | Wed, 10 Apr 2002 23:33:02 +0000 |
| Subject: | Bug #14456 Updated: mcrypt_create_iv: unterminated string & segfault | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-4609@lists.php.net to get a copy of this message | ||
ID: 14456
Updated by: sniper@php.net
Reported By: pumuckel@metropolis.de
-Status: Duplicate
+Status: Closed
Bug Type: mcrypt related
Operating System: Linux 2.2.X
PHP Version: 4.1.0
Assigned To: derick
Previous Comments:
------------------------------------------------------------------------
[2001-12-12 15:48:48] derick@php.net
dup of #14236
------------------------------------------------------------------------
[2001-12-12 09:15:33] derick@php.net
Already known
------------------------------------------------------------------------
[2001-12-12 09:05:56] pumuckel@metropolis.de
mcrypt_create_iv(mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB),
MCRYPT_RAND) produces following error and causes apache to segfault:
Warning - String is not zero-terminated
source: zend_execute_API.c:274
Workaround:
Replace the mcrypt_create_iv call with:
$fp = fopen("/dev/random", "r");
$iv = fread($fp, mcrypt_get_iv_size (MCRYPT_DES ,
MCRYPT_MODE_ECB));
fclose($fp);
Better: Should be fixed.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=14456&edit=1