From 150c1ef1cb5e521b6a0066ca82219d11031aa6f7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jaime=20Pe=CC=81rez=20Crespo?= <jaime.perez@uninett.no>
Date: Wed, 26 Apr 2017 14:22:53 +0200
Subject: [PATCH] bugfix: mb_strlen() needs the encoding too.
---
lib/SimpleSAML/Utils/Crypto.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/SimpleSAML/Utils/Crypto.php b/lib/SimpleSAML/Utils/Crypto.php
index fe17597c2..0bbc430cd 100644
--- a/lib/SimpleSAML/Utils/Crypto.php
+++ b/lib/SimpleSAML/Utils/Crypto.php
@@ -36,7 +36,7 @@ class Crypto
$hmac = mb_substr($ciphertext, 0, 32, '8bit');
$iv = mb_substr($ciphertext, 32, 16, '8bit');
- $msg = mb_substr($ciphertext, 48, mb_strlen($ciphertext) - 48, '8bit');
+ $msg = mb_substr($ciphertext, 48, mb_strlen($ciphertext, '8bit') - 48, '8bit');
// authenticate the ciphertext
if (self::secureCompare(hash_hmac('sha256', $iv.$msg, substr($key, 64, 64), true), $hmac)) {
--
GitLab