Re: 5.3.9, Hash DoS, release
| From: | Stefan Esser | Date: | Mon, 09 Jan 2012 17:03:08 +0000 |
| Subject: | Re: 5.3.9, Hash DoS, release | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57304@lists.php.net to get a copy of this message | ||
Hello Pierre,
> Not really the same, but yes. While the reasons you did it was not the
> same. Also the length check is not related or cannot be used for this
> fix. But nice self promotion ;-)
Considering the fact that the HashDOS problem was originally discussed in a paper 2003, someone
discussed HashDOS vs. PHP originally somewhen in 2004 and Hardened-PHP came out in 2004 it is funny
that you believe to know, why I added variable count restrictions.
Regards,
Stefan Esser