Skip to content

Conversation

bor0
Copy link
Contributor

@bor0 bor0 commented Aug 30, 2014

https://bugs.php.net/bug.php?id=66777

Remove upper bound for reallocations

Remove upper bound for reallocations
@derickr
Copy link
Member

derickr commented Sep 22, 2014

I don't think this is a good idea as it is a ddos like restriction. Also, why would this string into strftime ever be so large?

@datibbaw
Copy link
Contributor

@derickr Why doesn't the buffer start with format_len? And I believe the bail condition should come before the zend_string_realloc().

@derickr
Copy link
Member

derickr commented Sep 22, 2014

@datibbaw I don't know that, but just getting rid of the bounds is not the fix.

@smalyshev smalyshev added the Bug label Nov 24, 2014
@krakjoe
Copy link
Member

krakjoe commented Jan 4, 2017

Since this has merge conflicts, has been in effect rejected by the timelib maintainer (with whom I concur), and since the author seems to have abandoned working on it anyway, I'm closing this PR.

Please take this as encouragement to pursue a superior solution, and open a clean PR.

@krakjoe krakjoe closed this Jan 4, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants