[pcre-dev] Security risk or not? Changing PCRE options from patterns.

2012-10-01 Thread Zoltán Herczeg
Hi, Pcre has a nice feature, that you can change options by passing special control strings. E.g: /(*UTF8)a/ makes the pattern an UTF8 pattern. I am sure most people are not aware of this feature. Its side effect can be used for denial service attacks, since the valid UTF checks are not

[pcre-dev] How to use pcretest with Lookbehind assertions?

2012-10-01 Thread Thorsten Schöning
Hello, normally I use a tool called QuickREx to test regexes, but one which matches in QuickREx doesn't with PCRE and therefore I wanted to check with pcretest. My problem now is that I don't know how to use my regex in pcretest, it always prints the error: Unknown newline type at: My regex

Re: [pcre-dev] How to use pcretest with Lookbehind assertions?

2012-10-01 Thread Philip Hazel
On Mon, 1 Oct 2012, Thorsten Schöning wrote: Is the syntax (?!) not allowed in pcretest or am I doing something wrong? Thanks. My regex: (?i)(?!(?:(?:p7m|pk7|pkcs7)\.(?:p7m|pk7|pkcs7))|zip|zip\.(?:p7m|pk7|pkcs7))$ I tried this in pcretest, and I got Failed: lookbehind assertion is not

Re: [pcre-dev] Security risk or not? Changing PCRE options from patterns.

2012-10-01 Thread Philip Hazel
On Mon, 1 Oct 2012, Zoltán Herczeg wrote: Pcre has a nice feature, that you can change options by passing special control strings. E.g: /(*UTF8)a/ makes the pattern an UTF8 pattern. I am sure most people are not aware of this feature. Its side effect can be used for denial service attacks,

Re: [pcre-dev] How to use pcretest with Lookbehind assertions?

2012-10-01 Thread Thorsten Schöning
Guten Tag Philip Hazel, am Montag, 1. Oktober 2012 um 17:46 schrieben Sie: Failed: lookbehind assertion is not fixed length at offset 48 Could you have a look at the regex on what the problem is? Is pkcs7 as longer as the other branches in the regex not allowed because it is longer? I thought I

Re: [pcre-dev] How to use pcretest with Lookbehind assertions?

2012-10-01 Thread Thorsten Schöning
Guten Tag Thorsten Schöning, am Montag, 1. Oktober 2012 um 18:44 schrieben Sie: Could you tell me the difference to the one with the error? Thanks! The difference is, that only top level branches can be of different length and I use pkcs7 etc. underneath the top level branch. Seems I have to

Re: [pcre-dev] Security risk or not? Changing PCRE options from patterns.

2012-10-01 Thread Christian Persch
Hi; Am Mon, 1 Oct 2012 17:25:32 +0100 (BST) schrieb Philip Hazel p...@hermes.cam.ac.uk: The complete list of options that can be changed within a pattern is: (?i)caseless (?J)allow duplicate names (?m)multiline

[pcre-dev] JIT test failures on 64-bit AIX

2012-10-01 Thread Daniel Richard G .
Hello list, Zoltán, Current SVN trunk (r1050) fails make check on a 64-bit AIX 6.1 system (processor type = PowerPC_POWER6). Here's the log: user@aix:~/pcre-8.32-RC1$ gmake check gmake check-am gmake[1]: Entering directory `/home/user/pcre-8.32-RC1' gmake gmake[2]: Entering directory