File php7-crypt-possible-buffer-overread.patch of Package php7.28325
Index: php-7.4.33/ext/standard/crypt.c =================================================================== --- php-7.4.33.orig/ext/standard/crypt.c +++ php-7.4.33/ext/standard/crypt.c @@ -151,6 +151,7 @@ PHPAPI zend_string *php_crypt(const char } else if ( salt[0] == '$' && salt[1] == '2' && + salt[2] != 0 && salt[3] == '$') { char output[PHP_MAX_SALT_LEN + 1];