Re: Re: 5.3.9, Hash DoS, release
| From: | Stefan Esser | Date: | Mon, 09 Jan 2012 16:39:56 +0000 |
| Subject: | Re: Re: 5.3.9, Hash DoS, release | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57297@lists.php.net to get a copy of this message | ||
Hey,
> That is Restricting a max length of a buckets list in a hash table.
>
> If a bucket's length exceed 1024, any insertion into this bucket
> will return failure and a warning will be generated.
>
> What do you think?
very bad idea. Especially when it comes to numerical indices a legitimate application might put data
into a big array and have legitimate colliding keys.
Regards,
Stefan Esser