[PHP-DEV] Re: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-25 Thread Pierre Joye
hi, On Mon, Jan 17, 2011 at 5:21 AM, Tommy Pham tommy...@gmail.com wrote: Thanks Dan.  I'll keep it in mind for the future.  For interested parties, that's found in the official Windows 5.3.3 NTS VC9 build.  Works fine with the current official 5.3.5 NTS VC9. 5.3.5 was released only to fix

[PHP-DEV] Re: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Daniel Brown
On Sun, Jan 16, 2011 at 21:00, Tommy Pham tommy...@gmail.com wrote: Here are the results after some further tests for the same platform: * max float value: 1.7976931348623E+308 * min float value:  9.8813129168249E-324   floatval('1.00e-323') weird ... PHP wil hang when

Re: [PHP-DEV] Re: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Mike Robinson
On 2011-01-16, at 9:59 PM, Daniel Brown danbr...@php.net wrote: On Sun, Jan 16, 2011 at 21:00, Tommy Pham tommy...@gmail.com wrote: Here are the results after some further tests for the same platform: * max float value: 1.7976931348623E+308 * min float value: 9.8813129168249E-324

[PHP-DEV] RE: [PHP] [security] PHP has DoS vuln with large decimal points

2011-01-16 Thread Tommy Pham
-Original Message- From: paras...@gmail.com [mailto:paras...@gmail.com] On Behalf Of Daniel Brown Sent: Sunday, January 16, 2011 7:00 PM To: Tommy Pham Cc: PHP General; PHP Internals List; secur...@php.net Subject: Re: [PHP] [security] PHP has DoS vuln with large decimal points