Fixed bug #75221 (Argon2i always throws NUL at the end)

Apparently, `argon2_encodedlen()` also counts the terminating NUL byte;
that doesn't appear to be documented somewhere, but from looking at the
implementation[1] it is pretty obvious.  Therefore, the respective
`zend_string` has to be one byte shorter.

[1] <https://github.com/P-H-C/phc-winner-argon2/blob/20161029/src/argon2.c#L431-L436>

diff --git a/NEWS b/NEWS
index cfa129b82f326e601c86ec6c4f9b5b8e15226372..8578801bd7feae77b28541a3e9ca34a08badcfc9 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -12,6 +12,9 @@ PHP                                                                        NEWS
 - Openssl:
   . Fixed bug #75363 (openssl_x509_parse leaks memory). (Bob)
 
+- Standard:
+  . Fixed bug #75221 (Argon2i always throws NUL at the end). (cmb)
+
 - Zlib:
   . Fixed bug #75299 (Wrong reflection on inflate_init and inflate_add). (Fabien
     Villepinte)

diff --git a/ext/standard/password.c b/ext/standard/password.c
index 680eed47a807b58e7bb27f7ac7ceb9f46dcdb260..7f99f21e29ff9ac9e6b66d629f4e66ae6b97f2f6 100644 (file)
--- a/ext/standard/password.c
+++ b/ext/standard/password.c
@@ -526,7 +526,7 @@ PHP_FUNCTION(password_hash)
 #endif
                                );
 
-                               encoded = zend_string_alloc(encoded_len, 0);
+                               encoded = zend_string_alloc(encoded_len - 1, 0);
                                status = argon2_hash(
                                        time_cost,
                                        memory_cost,
@@ -538,7 +538,7 @@ PHP_FUNCTION(password_hash)
                                        ZSTR_VAL(out),
                                        ZSTR_LEN(out),
                                        ZSTR_VAL(encoded),
-                                       ZSTR_LEN(encoded),
+                                       encoded_len,
                                        type,
                                        ARGON2_VERSION_NUMBER
                                );

diff --git a/ext/standard/tests/password/bug75221.phpt b/ext/standard/tests/password/bug75221.phpt
new file mode 100644 (file)
index 0000000..ec03f92
--- /dev/null
+++ b/ext/standard/tests/password/bug75221.phpt
@@ -0,0 +1,19 @@
+--TEST--
+Bug #75221 (Argon2i always throws NUL at the end)
+--SKIPIF--
+<?php
+if (!defined('PASSWORD_ARGON2I')) die('skip password_hash not built with Argon2');
+?>
+--FILE--
+<?php
+$hash = password_hash(
+    "php",
+    PASSWORD_ARGON2I,
+    ['memory_cost' => 16384, 'time_cost' => 2, 'threads' => 4]
+);
+var_dump(substr($hash, -1, 1) !== "\0");
+?>
+===DONE===
+--EXPECT--
+bool(true)
+===DONE===