Re: Re: 5.3.9, Hash DoS, release

From: Date: Mon, 09 Jan 2012 17:12:49 +0000
Subject: Re: Re: 5.3.9, Hash DoS, release
References: 1 2 3 4 5  Groups: php.internals 
Request: Send a blank email to internals+get-57306@lists.php.net to get a copy of this message
Sent from my iPhone 在 2012-1-10,1:07,Stefan Esser <stefan@nopiracy.de> 写道: > Hello, > >> I am not sure whether you have understood my point. > I understood your point: you want to break HashTables because 1024 colliding entries could have > an performance impact. This could break thousands of scripts. > > for ($i=0; $i<2000; $i++) $arr[$i<<16] = 1; > > would stop working, while it should not. Sure, but why do you want to do this? Kill your own pc? So I can not agree with you on "*thousands* scripts". And if 1024 is not enough, then 2048, 4096 at most. Thanks > > Regards, > Stefan Esser

« previous php.internals (#57306) next »