Re: [security] PHP has DoS vuln with large decimal points

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Jan 16, 2011 at 21:00, Tommy Pham <tommyhp2@xxxxxxxxx> wrote:
>
> Here are the results after some further tests for the same platform:
>
> * max float value: 1.7976931348623E+308
> * min float value:  9.8813129168249E-324  <<
> floatval('1.0000000000000000000000e-323') weird ...
>
> PHP wil hang when the value is between (inclusive)
>
> floatval('2.22507385850720102e-308')  -
> floatval('2.22507385850720113e-308')
>
> I can't find the bug report for the issue @ bugs.php.net.  Does anyone know
> if one is submitted?  I should submit one?  Sucribe to dev list and go from
> there?

    If in doubt, file a bug.  Worse comes to worst, it will be marked
as bogus or a duplicate.  For security-related things, send them to
security@xxxxxxx, not to the General list.  Again, if it's of no
concern, it will simply be ignored as bogus or already known.

-- 
</Daniel P. Brown>
Network Infrastructure Manager
Documentation, Webmaster Teams
http://www.php.net/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux