Re: [PHP-DEV] Comment on Bug #30153: FATAL erealloc() error when using gzinflate()

2005-10-04 Thread Tim Nufire
This is starting to sound like the dispute in the initial bug report. Regardless of the root cause, this is a serious bug in PHP which exposes any script using gzinflate to denial of service attacks. While I'm sure extending zlib provides the most elegant fix to this problem, it should be p

Re: [PHP-DEV] Comment on Bug #30153: FATAL erealloc() error when using gzinflate()

2005-10-04 Thread George Schlossnagle
On Oct 4, 2005, at 11:50 AM, Tim Nufire wrote: Ramus, Thanks for the response. Unfortunately, I don't have any great ideas on how to patch this and for now have just stopped using gzinflate :-/ Is there a way to reopen bug 30153? That description of this issue is pretty good and, even if

Re: [PHP-DEV] Comment on Bug #30153: FATAL erealloc() error when using gzinflate()

2005-10-04 Thread Tim Nufire
Ramus, Thanks for the response. Unfortunately, I don't have any great ideas on how to patch this and for now have just stopped using gzinflate :-/ Is there a way to reopen bug 30153? That description of this issue is pretty good and, even if the bug is hard to fix, it should still be tracked

Re: [PHP-DEV] Comment on Bug #30153: FATAL erealloc() error when using gzinflate()

2005-09-27 Thread Rasmus Lerdorf
Tim Nufire wrote: > Reposting from php-general@lists.php.net to the internals@lists.php.net > list because I'm told that's the right place for a discussion like this > > In tracking down a bug that I am seeing on a site I work on, I came > across bug #30153 (http://bugs.php.net/bug.php?id=3015

[PHP-DEV] Comment on Bug #30153: FATAL erealloc() error when using gzinflate()

2005-09-27 Thread Tim Nufire
Reposting from php-general@lists.php.net to the internals@lists.php.net list because I'm told that's the right place for a discussion like this In tracking down a bug that I am seeing on a site I work on, I came across bug #30153 (http://bugs.php.net/bug.php?id=30153). I must say I am shoc