mbstring.func_overload

[paragonie-scott]

php -dmbstring.func_overload=7 test.php

<?php
var_dump(strlen("\xF0\x9D\xA5\xB3"));

Guess what this produces.

---

Using strlen() and substr() for crypto can be dangerous, especially since you work with raw binary.

[ezimuel]

@paragonie-scott right, I should use mb_strlen() and mb_substr() for binary data. I'll fix this shortly. Thanks again for your suggestion!

[ezimuel]

@paragonie-scott I fixed in master.

[paragonie-scott]

👍