Description:
------------
/ext/standard/password.c uses php_rand() to generate a password salt for password_hash() if attempts to read random bytes from the OS's CSPRNG fail.
https://github.com/php/php-src/blob/php-7.0.0RC5/ext/standard/password.c#L153-L157

php_rand() is a simpel LCG and unsuitable for salt generation. All previous and future outputs are known from either the seed or from any given output. PHP scripts can seed it, which is unsafe. If they don't, PHP seeds it from a function of its PID and time(0), which is also unsafe.

The salt generator for crypt() also resorts to php_rand().

PHP 7.0 introduces random_bytes(), which throws \Exception if it cannot read from the OS's CSPRNG. password_hash() and crypt() should do the same.

Test script:
---------------
<?php
// On a Linux/BSD-like system with access to /dev/random disabled
$seed = 1073741824; // Choose any value you like
srand($seed);
echo password_hash('password', PASSWORD_DEFAULT) . "\n";
srand($seed);
echo password_hash('password', PASSWORD_DEFAULT) . "\n";
srand($seed);
echo password_hash('password', PASSWORD_DEFAULT) . "\n";
srand($seed);
echo password_hash('password', PASSWORD_DEFAULT) . "\n";


Expected result:
----------------
Any function that purports to salt passwords for hashing, such as password_hash(), should not leave it self open to collisions.

Actual result:
--------------
$2y$10$N34AYO6UZV0eADdJpnoyr.Z/ha44pJhmgT/KN24Mf7prVMjEbiaR.
$2y$10$N34AYO6UZV0AAAAAAAAAA./YVu4n4IudpH8uXavEoL1O6YlyNFhBy
$2y$10$N34AYO6UZV0eADdJpnoyr.Z/ha44pJhmgT/KN24Mf7prVMjEbiaR.
$2y$10$N34AYO6UZV0AAAAAAAAAA./YVu4n4IudpH8uXavEoL1O6YlyNFhBy