ID: 28905
Comment by: phpbugs dot 20 dot nky at spamgourmet dot com
Reported By: screen at brainkrash dot com
Status: Open
Bug Type: Unknown/Other Function
Operating System: Win32/Linux
PHP Version: 4.3.6
New Comment:
I get it too..
PHP Version => 4.3.8
sys-libs/cracklib-2.7-r8
# md5sum /usr/lib/cracklib_dict.hwm
94ab9cf6af519cbd9467353082453e80 /usr/lib/cracklib_dict.hwm
strace:
-----
open("/usr/lib/cracklib_dict.pwd", O_RDONLY) = 3
open("/usr/lib/cracklib_dict.pwi", O_RDONLY) = 7
open("/usr/lib/cracklib_dict.hwm", O_RDONLY) = 8
fstat64(7, {st_mode=S_IFREG|0644, st_size=77356, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x40015000
read(7, "1Vwp|[EMAIL PROTECTED]"...,
4096) = 4096
fstat64(8, {st_mode=S_IFREG|0644, st_size=1024, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x40016000
read(8, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
4096) = 1024
write(1, "\nWarning: crack_check(): 308 is "..., 139) = 139
-----
Previous Comments:
------------------------------------------------------------------------
[2004-07-16 23:46:14] sheltren at cs dot ucsb dot edu
I can confirm this bug on a Fedora Core 2 system.
Using the older crack.c file (from php 4.3.4) eliminates the error, and
cracklib works as expected as above.
------------------------------------------------------------------------
[2004-07-16 11:03:00] jocke at blajj dot net
Well, well... I compiled PHP 4.3.8 with the old version of
ext/crack/crack.c (version 1.18.8.2 from PHP 4.3.4), and YES, it works!
------------------------------------------------------------------------
[2004-07-16 06:44:43] jocke at blajj dot net
Ok, I just downloaded all the PHP sources from version 4.3.3
and up, and did a quick check of the cracklib sources.
The file php-4.3.x/ext/crack/crack.c was changed in PHP 4.3.5 (from
version 1.18.8.2 to 1.18.8.3) and has stayed in that version since.
PHP 4.3.4: /* $Id: crack.c,v 1.18.8.2 2003/06/12 12:37:03 andrey Exp $
*/
PHP 4.3.5: (and up) /* $Id: crack.c,v 1.18.8.3 2004/01/04 20:01:07
iliaa Exp $ */
I will later try to recompile 4.3.8 with the earlier version of crack.c
and see what happens. (maybe not a good idea, but I want to try...)
------------------------------------------------------------------------
[2004-07-16 06:16:10] jocke at blajj dot net
Same here...
I upgraded from Apache 1.3.29 / PHP 4.3.4 (where the Cracklib-functions
actually worked) to Apache 1.3.31 / PHP 4.3.8 (with the exact same
configuration options) and now the Cracklib-functions in PHP are
totally broken...
[16-Jul-2004 06:00:06] PHP Warning: crack_check(): 135510476 is not a
valid cracklib dictionary resource in ...
[16-Jul-2004 06:00:06] PHP Warning: crack_getlastmessage(): No obscure
checks in this session in ...
Annoying, to say the least :-)
------------------------------------------------------------------------
[2004-07-15 21:45:25] bradshaw at mcs dot anl dot gov
I am seeing this exact same problem with the 4.3.8 that we just started
using on our linux server running apache 2.0.50.
Is there a fix or workaround for this cause it is really affecting our
account creation system.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/28905
--
Edit this bug report at http://bugs.php.net/?id=28905&edit=1
