Re: [PHP-DEV] OpenSSL bug in 5.4.33 and 5.5.17

2014-09-19 Thread Remi Collet
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 19/09/2014 17:30, Daniel Lowrey a écrit : > In an effort to fix a very old (seven years old) DoS vulnerability > involving encrypted streams I created a regression where feof() > notifications on encrypted sockets are broken. This is present in >

[PHP-DEV] OpenSSL bug in 5.4.33 and 5.5.17

2014-09-19 Thread Daniel Lowrey
Hi folks! I know this isn't the kind of fun stuff people want to deal with on Friday but ... In an effort to fix a very old (seven years old) DoS vulnerability involving encrypted streams I created a regression where feof() notifications on encrypted sockets are broken. This is present in both th