File php7-crypt-possible-buffer-overread.patch of Package php7.27849
Index: php-7.2.34/ext/standard/crypt.c =================================================================== --- php-7.2.34.orig/ext/standard/crypt.c +++ php-7.2.34/ext/standard/crypt.c @@ -156,6 +156,7 @@ PHPAPI zend_string *php_crypt(const char } else if ( salt[0] == '$' && salt[1] == '2' && + salt[2] != 0 && salt[3] == '$') { char output[PHP_MAX_SALT_LEN + 1];