ywelsch commented on pull request #752:
URL: https://github.com/apache/lucene/pull/752#issuecomment-1073949409


   > I'm still -1 for the change. If you hit StackOverFlowError, really you 
should let the VM exit. There are no guarantees at this point.
   
   That kind of argument makes it even more compelling for StackOverFlowErrors 
to be avoided in the first place by safeguarding Lucene's RegExp implementation 
or, if deemed technically too complex, putting a big fat banner on the RegExp 
class that it's unsafe to use for large inputs.
   
   I would be happy to hear everyone's thoughts here on alternative solutions. 
For example, how would you feel about computing and passing the stack depth 
through the `parseXYZ` methods, and aborting computation at a user-configurable 
limit (set to 500 for example in default constructor)?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to