PHP 4.0 Bug #8834: crypt() starts from not random salt
| From: | muhlig at us dot edu dot pl | Date: | Mon, 22 Jan 2001 11:05:34 +0000 |
| Subject: | PHP 4.0 Bug #8834: crypt() starts from not random salt | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-44702@lists.php.net to get a copy of this message | ||
From: muhlig@us.edu.pl
Operating system: Solaris 2.4, 2.6
PHP version: 4.0 Latest CVS (22/01/2001)
PHP Bug Type: Strings related
Bug description: crypt() starts from not random salt
PHP compiled as Apache module. Look like crypt() starts from not random salt. In case of my Solaris
2.4, first crypt() call always generates string starting from "IH". In case of Solaris 2.6
it always starts from "C.".
Looks like in every instantiation of new Apache process PHP starts crypt from the same salt value.
In the same process next crypt() calls look like they generate random strings, though. But next
process restarts with the same value.
--
Edit Bug report at: http://bugs.php.net/?id=8834&edit=1