Re: PHP 4.0 Bug #7720 Updated: Return address in stackoverwritten?

From: Date: Thu, 09 Nov 2000 12:57:39 +0000
Subject: Re: PHP 4.0 Bug #7720 Updated: Return address in stackoverwritten?
References: 1  Groups: php.dev 
Request: Send a blank email to php-dev+get-37538@lists.php.net to get a copy of this message
On Thu, 9 Nov 2000, Adam Wright wrote: > Date: Thu, 9 Nov 2000 12:54:54 -0000 > From: Adam Wright <adam@elysium.ltd.uk> > To: PHP Development <php-dev@lists.php.net> > Subject: Re: [PHP-DEV] PHP 4.0 Bug #7720 Updated: Return address in > stackoverwritten? > > in C, and marvel as you run out of stack. This isnt a bug in PHP, though its > not handled that gracefully. 10,000 recursions is an awful lot anyway, and > you should look at other methods to accomplish your goal (think of the > memory usage even if you had enough stack!), imho. Yeah, right, it's a lot. In C the stack just grows and everyone is happy when just memory runs out. php instead overwrites a return address on the stack. We found this problem in many other exploits before.

« previous php.dev (#37538) next »