[PHP-DEV] Bug #14456 Updated: mcrypt_create_iv: unterminated string segfault

2001-12-12 Thread derick

ID: 14456
Updated by: derick
Reported By: [EMAIL PROTECTED]
Old Status: Open
Status: Analyzed
Bug Type: mcrypt related
Operating System: Linux 2.2.X
PHP Version: 4.1.0
Old Assigned To: 
Assigned To: derick
New Comment:

Already known

Previous Comments:


[2001-12-12 09:05:56] [EMAIL PROTECTED]

mcrypt_create_iv(mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB), MCRYPT_RAND) 
produces following error and causes apache to segfault:

Warning - String is not zero-terminated
source: zend_execute_API.c:274


Workaround:

Replace the mcrypt_create_iv call with:
  $fp = fopen(/dev/random, r);
  $iv = fread($fp, mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB));
  fclose($fp);

Better: Should be fixed.





Edit this bug report at http://bugs.php.net/?id=14456edit=1


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP-DEV] Bug #14456 Updated: mcrypt_create_iv: unterminated string segfault

2001-12-12 Thread derick

ID: 14456
Updated by: derick
Reported By: [EMAIL PROTECTED]
Old Status: Analyzed
Status: Duplicate
Bug Type: mcrypt related
Operating System: Linux 2.2.X
PHP Version: 4.1.0
Assigned To: derick
New Comment:

dup of #14236

Previous Comments:


[2001-12-12 09:15:33] [EMAIL PROTECTED]

Already known



[2001-12-12 09:05:56] [EMAIL PROTECTED]

mcrypt_create_iv(mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB), MCRYPT_RAND) 
produces following error and causes apache to segfault:

Warning - String is not zero-terminated
source: zend_execute_API.c:274


Workaround:

Replace the mcrypt_create_iv call with:
  $fp = fopen(/dev/random, r);
  $iv = fread($fp, mcrypt_get_iv_size (MCRYPT_DES , MCRYPT_MODE_ECB));
  fclose($fp);

Better: Should be fixed.





Edit this bug report at http://bugs.php.net/?id=14456edit=1


-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]