Bug #16064: array_merge_recursive() can be used for DoS
| From: | ahristov at icygen dot com | Date: | Thu, 14 Mar 2002 14:15:54 +0000 |
| Subject: | Bug #16064: array_merge_recursive() can be used for DoS | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-2477@lists.php.net to get a copy of this message | ||
From: ahristov@icygen.com
Operating system: RH 7.1
PHP version: 4.0CVS-2002-03-14
PHP Bug Type: Arrays related
Bug description: array_merge_recursive() can be used for DoS
<?php
array_merge_recursively($GLOBALS,$GLOBALS)
?>
On the test server all consoles hanged. 100%.CPU load. 98%
system - kswapd started to swap as a beast.
No problems with this.
<?php
$a=array(1);
$a[0]=&$a[0];
array_merge_recursive($a,$a);
var_dump($a);
?>
--
Edit bug report at http://bugs.php.net/?id=16064&edit=1
--
Fixed in CVS: http://bugs.php.net/fix.php?id=16064&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=16064&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=16064&r=needtrace
Try newer version: http://bugs.php.net/fix.php?id=16064&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=16064&r=support
Expected behavior: http://bugs.php.net/fix.php?id=16064&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=16064&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=16064&r=submittedtwice