ID: 28905 Comment by: phpbugs dot 20 dot nky at spamgourmet dot com Reported By: screen at brainkrash dot com Status: Open Bug Type: Unknown/Other Function Operating System: Win32/Linux PHP Version: 4.3.6 New Comment:
I get it too.. PHP Version => 4.3.8 sys-libs/cracklib-2.7-r8 # md5sum /usr/lib/cracklib_dict.hwm 94ab9cf6af519cbd9467353082453e80 /usr/lib/cracklib_dict.hwm strace: ----- open("/usr/lib/cracklib_dict.pwd", O_RDONLY) = 3 open("/usr/lib/cracklib_dict.pwi", O_RDONLY) = 7 open("/usr/lib/cracklib_dict.hwm", O_RDONLY) = 8 fstat64(7, {st_mode=S_IFREG|0644, st_size=77356, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000 read(7, "1Vwp|[EMAIL PROTECTED]"..., 4096) = 4096 fstat64(8, {st_mode=S_IFREG|0644, st_size=1024, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40016000 read(8, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 1024 write(1, "\nWarning: crack_check(): 308 is "..., 139) = 139 ----- Previous Comments: ------------------------------------------------------------------------ [2004-07-16 23:46:14] sheltren at cs dot ucsb dot edu I can confirm this bug on a Fedora Core 2 system. Using the older crack.c file (from php 4.3.4) eliminates the error, and cracklib works as expected as above. ------------------------------------------------------------------------ [2004-07-16 11:03:00] jocke at blajj dot net Well, well... I compiled PHP 4.3.8 with the old version of ext/crack/crack.c (version 1.18.8.2 from PHP 4.3.4), and YES, it works! ------------------------------------------------------------------------ [2004-07-16 06:44:43] jocke at blajj dot net Ok, I just downloaded all the PHP sources from version 4.3.3 and up, and did a quick check of the cracklib sources. The file php-4.3.x/ext/crack/crack.c was changed in PHP 4.3.5 (from version 1.18.8.2 to 1.18.8.3) and has stayed in that version since. PHP 4.3.4: /* $Id: crack.c,v 1.18.8.2 2003/06/12 12:37:03 andrey Exp $ */ PHP 4.3.5: (and up) /* $Id: crack.c,v 1.18.8.3 2004/01/04 20:01:07 iliaa Exp $ */ I will later try to recompile 4.3.8 with the earlier version of crack.c and see what happens. (maybe not a good idea, but I want to try...) ------------------------------------------------------------------------ [2004-07-16 06:16:10] jocke at blajj dot net Same here... I upgraded from Apache 1.3.29 / PHP 4.3.4 (where the Cracklib-functions actually worked) to Apache 1.3.31 / PHP 4.3.8 (with the exact same configuration options) and now the Cracklib-functions in PHP are totally broken... [16-Jul-2004 06:00:06] PHP Warning: crack_check(): 135510476 is not a valid cracklib dictionary resource in ... [16-Jul-2004 06:00:06] PHP Warning: crack_getlastmessage(): No obscure checks in this session in ... Annoying, to say the least :-) ------------------------------------------------------------------------ [2004-07-15 21:45:25] bradshaw at mcs dot anl dot gov I am seeing this exact same problem with the 4.3.8 that we just started using on our linux server running apache 2.0.50. Is there a fix or workaround for this cause it is really affecting our account creation system. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/28905 -- Edit this bug report at http://bugs.php.net/?id=28905&edit=1