File php7-crypt-possible-buffer-overread.patch of Package php7.28325

Index: php-7.4.33/ext/standard/crypt.c
===================================================================
--- php-7.4.33.orig/ext/standard/crypt.c
+++ php-7.4.33/ext/standard/crypt.c
@@ -151,6 +151,7 @@ PHPAPI zend_string *php_crypt(const char
 		} else if (
 				salt[0] == '$' &&
 				salt[1] == '2' &&
+				salt[2] != 0 &&
 				salt[3] == '$') {
 			char output[PHP_MAX_SALT_LEN + 1];
 
openSUSE Build Service is sponsored by