Re: 5.3.9, Hash DoS, release
| From: | Pierre Joye | Date: | Mon, 09 Jan 2012 16:50:32 +0000 |
| Subject: | Re: 5.3.9, Hash DoS, release | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57300@lists.php.net to get a copy of this message | ||
On Mon, Jan 9, 2012 at 5:34 PM, Stefan Esser <stefan@nopiracy.de> wrote:
> Of course I am biased, because suhosin is one of the affected extensions. But that said suhosin
> has a limit similar to max_input_vars for 7 years now.
Not really the same, but yes. While the reasons you did it was not the
same. Also the length check is not related or cannot be used for this
fix. But nice self promotion ;-)
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org