]> granicus.if.org Git - php/commit
Don't accept objects for options in password_hash()
authorNikita Popov <nikita.ppv@gmail.com>
Tue, 29 Oct 2019 12:20:22 +0000 (13:20 +0100)
committerNikita Popov <nikita.ppv@gmail.com>
Tue, 29 Oct 2019 12:20:22 +0000 (13:20 +0100)
commit63a20cb400d064bc56254896dd8e1e921df27af8
tree7c95a814d0e69cfd89422da59b2dc7ab74ce716c
parentc43179fb6bf31f1b27751c648e8cff5e8754803b
Don't accept objects for options in password_hash()

This was likely a mixup of zpp modifiers in the original implementation.
Per the RFC only arrays should be accepted here.
ext/standard/password.c
ext/standard/tests/password/password_hash_error.phpt