This fixes a bug in PHP/HH's crypt_blowfish implementation that can cause a short...
commit673fd26b1acb9f892f3e65854c0dd36a297708ae
authorWilfred Hughes <wilfred@meta.com>
Tue, 7 Mar 2023 00:46:52 +0000 (6 16:46 -0800)
committerWilfred Hughes <wilfred@meta.com>
Tue, 7 Mar 2023 00:49:55 +0000 (6 16:49 -0800)
tree41240eb2fa2cc7d62a2a3d4414edb11d53ff5db1
parentb1edd299d1b9d012a538e44aa56243274c47129d
This fixes a bug in PHP/HH's crypt_blowfish implementation that can cause a short salt to
return an invalid result

Associated CVE is CVE-2023-0567.
hphp/test/slow/ext_string/t143363292.php [new file with mode: 0644]
hphp/test/slow/ext_string/t143363292.php.expectf [new file with mode: 0644]
hphp/test/slow/ext_string/t143363292.php.runif [new file with mode: 0644]
hphp/test/slow/ext_string/t76103217.php.expect
hphp/zend/crypt-blowfish.cpp