A test in ruby for this problem http://blog.ircmaxell.com/2015/03/security-issue-combining-bcrypt-with.html confirmed

bcrypt_null_bytes.rb

require 'bcrypt'

my_password = "\0hello is it me you're looking for";
verify = BCrypt::Password.create(my_password)

puts my_password.inspect
# This password verifies according to bcrypt
puts verify == my_password ? ' password verified ' : 'password incorrect';
# but also ...
puts verify == '' ? ' But also verifies to a blank string' : 'Hey thats just a blank string';
# or indeed any password that starts with a null byte
puts verify == "\0I can see it you eyes" ? ' Yep password is good' : 'Hey thats different';