Top New Best Ask Show Jobs

PHP 5.3.7 release has a major bug in MD5 crypt | Hacker News Reader

PHP 5.3.7 release has a major bug in MD5 crypt

bugs.php.net

15 points·waffle_ss··4 comments

Open articleView on HN

Someone forgot to run the unit tests before releasing... So much for a release checklist.

Everyone can still log in, what's the problem?

Also, I just checked, there don't seem to be PHP unit tests for crypt(), in their tests directory. (http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/tests...).

#define irony 1

Looks like the bug was introduced by Rasmus Lerdorf, the creator of PHP.

http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/ext/s...

Reply on news.ycombinator.com