[e3d4e0a] | 1 | <?php
|
---|
| 2 | declare(strict_types=1);
|
---|
| 3 | namespace ParagonIE\ConstantTime;
|
---|
| 4 |
|
---|
| 5 | use TypeError;
|
---|
| 6 |
|
---|
| 7 | /**
|
---|
| 8 | * Copyright (c) 2016 - 2022 Paragon Initiative Enterprises.
|
---|
| 9 | * Copyright (c) 2014 Steve "Sc00bz" Thomas (steve at tobtu dot com)
|
---|
| 10 | *
|
---|
| 11 | * Permission is hereby granted, free of charge, to any person obtaining a copy
|
---|
| 12 | * of this software and associated documentation files (the "Software"), to deal
|
---|
| 13 | * in the Software without restriction, including without limitation the rights
|
---|
| 14 | * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
---|
| 15 | * copies of the Software, and to permit persons to whom the Software is
|
---|
| 16 | * furnished to do so, subject to the following conditions:
|
---|
| 17 | *
|
---|
| 18 | * The above copyright notice and this permission notice shall be included in all
|
---|
| 19 | * copies or substantial portions of the Software.
|
---|
| 20 | *
|
---|
| 21 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
---|
| 22 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
---|
| 23 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
---|
| 24 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
---|
| 25 | * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
---|
| 26 | * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
---|
| 27 | * SOFTWARE.
|
---|
| 28 | */
|
---|
| 29 |
|
---|
| 30 | /**
|
---|
| 31 | * Class Binary
|
---|
| 32 | *
|
---|
| 33 | * Binary string operators that don't choke on
|
---|
| 34 | * mbstring.func_overload
|
---|
| 35 | *
|
---|
| 36 | * @package ParagonIE\ConstantTime
|
---|
| 37 | */
|
---|
| 38 | abstract class Binary
|
---|
| 39 | {
|
---|
| 40 | /**
|
---|
| 41 | * Safe string length
|
---|
| 42 | *
|
---|
| 43 | * @ref mbstring.func_overload
|
---|
| 44 | *
|
---|
| 45 | * @param string $str
|
---|
| 46 | * @return int
|
---|
| 47 | */
|
---|
| 48 | public static function safeStrlen(
|
---|
| 49 | #[\SensitiveParameter]
|
---|
| 50 | string $str
|
---|
| 51 | ): int {
|
---|
| 52 | if (\function_exists('mb_strlen')) {
|
---|
| 53 | // mb_strlen in PHP 7.x can return false.
|
---|
| 54 | /** @psalm-suppress RedundantCast */
|
---|
| 55 | return (int) \mb_strlen($str, '8bit');
|
---|
| 56 | } else {
|
---|
| 57 | return \strlen($str);
|
---|
| 58 | }
|
---|
| 59 | }
|
---|
| 60 |
|
---|
| 61 | /**
|
---|
| 62 | * Safe substring
|
---|
| 63 | *
|
---|
| 64 | * @ref mbstring.func_overload
|
---|
| 65 | *
|
---|
| 66 | * @staticvar boolean $exists
|
---|
| 67 | * @param string $str
|
---|
| 68 | * @param int $start
|
---|
| 69 | * @param ?int $length
|
---|
| 70 | * @return string
|
---|
| 71 | *
|
---|
| 72 | * @throws TypeError
|
---|
| 73 | */
|
---|
| 74 | public static function safeSubstr(
|
---|
| 75 | #[\SensitiveParameter]
|
---|
| 76 | string $str,
|
---|
| 77 | int $start = 0,
|
---|
| 78 | ?int $length = null
|
---|
| 79 | ): string {
|
---|
| 80 | if ($length === 0) {
|
---|
| 81 | return '';
|
---|
| 82 | }
|
---|
| 83 | if (\function_exists('mb_substr')) {
|
---|
| 84 | return \mb_substr($str, $start, $length, '8bit');
|
---|
| 85 | }
|
---|
| 86 | // Unlike mb_substr(), substr() doesn't accept NULL for length
|
---|
| 87 | if ($length !== null) {
|
---|
| 88 | return \substr($str, $start, $length);
|
---|
| 89 | } else {
|
---|
| 90 | return \substr($str, $start);
|
---|
| 91 | }
|
---|
| 92 | }
|
---|
| 93 | }
|
---|