Re: How does the PHP Ghost one-liner work?

Hi! >> does this indicate any problems with PHP? > > No. That said, it may make sense to put a cap on gethostbyname() argument as a public service, if we can find a good limit. IIRC, there are limits on both FQDN and hostname component lengths, so if we check for these limits, we may add protection for people that for unexplicable reasons upgrade their PHP but not their glibc. -- Stas Malyshev smalyshev@gmail.com