Hi!

> We could patch zend_hash.c in two ways: SipHash (sloooow) or only fatals
> (very bad for e.g. servers written in PHP. When they have to decode some

Why very bad?

> JSON, it's trivial for an attacker to crash them very easily). As that's

Fatal error is not crash. It's a normal ending of the request, of the
server can not tolerate it, how can it deal with memory limits, string
overflows, etc.? There's a lot of things right now that can cause fatal
error.

-- 
Stas Malyshev
smalys...@gmail.com

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to