archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-16 14:08:47 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

fix thread safety and zeroing method

Browse source
This commit is contained in:
Anatol Belski 2015-07-29 13:35:26 +02:00
parent 2aa9db5a22
commit db70a337ff
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
ext/standard/php_crypt_r.c
View file

@ -318,7 +318,7 @@ _destroyProv:
*/ */
char * php_md5_crypt_r(const char *pw, const char *salt, char *out) char * php_md5_crypt_r(const char *pw, const char *salt, char *out)
{ {
static char passwd[MD5_HASH_MAX_LEN], *p; ZEND_TLS char passwd[MD5_HASH_MAX_LEN], *p;
const char *sp, *ep; const char *sp, *ep;
unsigned char final[16]; unsigned char final[16];
unsigned int i, sl, pwl; unsigned int i, sl, pwl;
@ -418,7 +418,7 @@ char * php_md5_crypt_r(const char *pw, const char *salt, char *out)
*p = '\0'; *p = '\0';
/* Don't leave anything around in vm they could use. */ /* Don't leave anything around in vm they could use. */
memset(final, 0, sizeof(final)); ZEND_SECURE_ZERO(final, sizeof(final));
return (passwd); return (passwd);
} }