Yet another fix for max_input_vars

Hi: the origin thread is too long, so I open a new thread for this. I have made another patch try to fix this issue. the key point is, randomizing the table size(tableMask). instead of double the the table size in zend_hash_do_resize, I increase the table size with a random delta ( the value now is just a try, we can change it to a more appropriate value), that is: new_table_size = old_table_size * 2 + random_num. then, the collision can not be predicatible, which fix the problem, and also fixed the issue in json/soap/serialize etc. here is the patch(draft now): https://bugs.php.net/patch-display.php?bug_id=60655&patch=rand_hash_resize.patch&revision=latest after this fix , may slow down the php, but compared to the security threat I thinks the cost could be ignored. for the test script list in http://nikic.github.com/2011/12/28/Supercolliding-a-PHP-array.html: *before patched: Inserting 65536 evil elements took 162.65940284729 seconds Inserting 65536 good elements took 0.075557947158813 seconds *after patched: Inserting 65536 evil elements took 0.074128866195679 seconds Inserting 65536 good elements took 0.091044902801514 seconds what do you think ? thanks -- Laruence  Xinchen Hui http://www.laruence.com/