salt[1] == '2' &&
salt[3] == '$') {
char output[PHP_MAX_SALT_LEN + 1];
- int k = 7;
-
- while (isalnum(salt[k]) || '.' == salt[k] || '/' == salt[k]) {
- k++;
- }
- if (k != salt_len) {
- return NULL;
- }
memset(output, 0, PHP_MAX_SALT_LEN + 1);
+++ /dev/null
---TEST--
-Bug #72703 Out of bounds global memory read in BF_crypt triggered by password_verify
---SKIPIF--
-<?php
-if (!function_exists('crypt'))) {
- die("SKIP crypt() is not available");
-}
-?>
---FILE--
-<?php
- var_dump(password_verify("","$2y$10$$"));
-?>
-==OK==
---EXPECT--
-bool(false)
-==OK==
-