[php-src] PR #23951: Fix mhash_keygen_s2k() $length truncation to int
| From: | marc-mabe | Date: | Sun, 27 Sep 2026 20:37:11 +0000 |
| Subject: | [php-src] PR #23951: Fix mhash_keygen_s2k() $length truncation to int | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38866@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23951
Author: marc-mabe
A $length above INT_MAX was truncated to int before the range check, so e.g. 2**32 + 16 silently
returned 16 bytes. Throw a ValueError instead.
fixes #23950