Re: com php-src: Add optional depth parameter to json_encode #62369: ext/json/json.c ext/json/php_json.h ext/json/tests/bug62369.phpt
| From: | Florian Anderiasch | Date: | Thu, 26 Jul 2012 18:26:45 +0000 |
| Subject: | Re: com php-src: Add optional depth parameter to json_encode #62369: ext/json/json.c ext/json/php_json.h ext/json/tests/bug62369.phpt | ||
| References: | 1 2 3 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-69714@lists.php.net to get a copy of this message | ||
On 26.07.2012 14:14, Pierre Joye wrote:
Hi, I hadn't seen any discussion apart from Laruence's change to FR so I went ahead and implemented it. The default behavior is unchanged, I'm not really seeing how this is security relevant when in the bug it's going up to segfault and now you can limit it and get a real error. It has no NEWS entry because when I asked dsp if that's something for 5.4 I didn't get a yes or no - so I didn't update as I didn't know where. Greetings, FlorianWas it ever discussed?afair we did not want to add that, back then when we discussed the security issue related to huge input data.