Projects
home:rottame:vhosts-ng:php74
php7
php7-CVE-2024-3096.patch
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File php7-CVE-2024-3096.patch of Package php7
Index: php-7.4.33/ext/standard/password.c =================================================================== --- php-7.4.33.orig/ext/standard/password.c +++ php-7.4.33/ext/standard/password.c @@ -260,6 +260,11 @@ static zend_string* php_password_bcrypt_ zval *zcost; zend_long cost = PHP_PASSWORD_BCRYPT_COST; + if (memchr(ZSTR_VAL(password), '\0', ZSTR_LEN(password))) { + php_error_docref(NULL, E_ERROR, "Bcrypt password must not contain null character"); + return NULL; + } + if (options && (zcost = zend_hash_str_find(options, "cost", sizeof("cost")-1)) != NULL) { cost = zval_get_long(zcost); }
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.