On Thu, Jan 20, 2022 at 10:33 AM Yann Ylavic <ylavic....@gmail.com> wrote:
>
> On Thu, Jan 20, 2022 at 3:53 PM William A Rowe Jr <wr...@rowe-clan.net> wrote:
> >
> > pcre1 is very dangerous, on stack. pcre2 is highly cautioned against
> > using stack for
> > its arrays, by its author. We should heed the advice.
> Not sure if I can do that with PCRE2 if it always
> --no-recurse-on-stack, probably if pcre2_malloc/free are still
> override-able but I didn't look into it yet (until then I'll keep
> using PCRE1..).

To reiterate; PCRE1 is EOL and irreparable from the security
reports which the author has received and cannot share, so it
is very unwise, end of statement.

That's why PCRE2 got written.

Cheers,

Bill

Reply via email to