Re: Re: [security] PHP has DoS vuln with large decimal points

On 2011-01-16, at 9:59 PM, Daniel Brown <danbrown@php.net> wrote: > On Sun, Jan 16, 2011 at 21:00, Tommy Pham <tommyhp2@gmail.com> wrote: >> >> Here are the results after some further tests for the same platform: >> >> * max float value: 1.7976931348623E+308 >> * min float value: 9.8813129168249E-324 << >> floatval('1.0000000000000000000000e-323') weird ... >> >> PHP wil hang when the value is between (inclusive) >> >> floatval('2.22507385850720102e-308') - >> floatval('2.22507385850720113e-308') >> >> I can't find the bug report for the issue @ bugs.php.net. Does anyone know >> if one is submitted? I should submit one? Sucribe to dev list and go from >> there? > > If in doubt, file a bug. Worse comes to worst, it will be marked > as bogus or a duplicate. For security-related things, send them to > security@php.net, not to the General list. Again, if it's of no > concern, it will simply be ignored as bogus or already known Is this not it? http://bugs.php.net/53632 Best Regards Mike Robinson