Re: How does the PHP Ghost one-liner work?
| From: | Leigh | Date: | Fri, 30 Jan 2015 19:09:30 +0000 |
| Subject: | Re: How does the PHP Ghost one-liner work? | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-81446@lists.php.net to get a copy of this message | ||
On 30 January 2015 at 19:05, Patrick Schaaf <php@bof.de> wrote:
> Am 30.01.2015 19:43 schrieb "Robert Williams" <rewilliams@thesba.com>:
>>
>> % php -r '$e="0";for($i=0;$i<2500;$i++){$e="0$e";}
>> gethostbyname($e);’
>
> What a funny way to say gethostbyname(str_repeat("0", 2501));
>
>> does this indicate any problems with PHP?
>
> No.
>
> best regards
> Patrick
Well, I guess in theory we should be limiting the size of input to
gethostbyname to 255 characters.
http://tools.ietf.org/html/rfc1035#section-2.3.4