Re: [security] PHP has DoS vuln with large decimal points
| From: | Daniel Brown | Date: | Mon, 17 Jan 2011 02:59:33 +0000 |
| Subject: | Re: [security] PHP has DoS vuln with large decimal points | ||
| References: | 1 2 | Groups: | php.general php.internals |
| Request: | Send a blank email to php-general+get-310812@lists.php.net to get a copy of this message | ||
On Sun, Jan 16, 2011 at 21:00, Tommy Pham <tommyhp2@gmail.com> wrote:
>
> Here are the results after some further tests for the same platform:
>
> * max float value: 1.7976931348623E+308
> * min float value: 9.8813129168249E-324 <<
> floatval('1.0000000000000000000000e-323') weird ...
>
> PHP wil hang when the value is between (inclusive)
>
> floatval('2.22507385850720102e-308') -
> floatval('2.22507385850720113e-308')
>
> I can't find the bug report for the issue @ bugs.php.net. Does anyone know
> if one is submitted? I should submit one? Sucribe to dev list and go from
> there?
If in doubt, file a bug. Worse comes to worst, it will be marked
as bogus or a duplicate. For security-related things, send them to
security@php.net, not to the General list. Again, if it's of no
concern, it will simply be ignored as bogus or already known.
--
</Daniel P. Brown>
Network Infrastructure Manager
Documentation, Webmaster Teams
http://www.php.net/