From:             [EMAIL PROTECTED]
Operating system: RH 7.1
PHP version:      4.0CVS-2002-03-14
PHP Bug Type:     Arrays related
Bug description:  array_merge_recursive() can be used for DoS

<?php
array_merge_recursively($GLOBALS,$GLOBALS) 
?>
On the test server all consoles hanged. 100%.CPU load. 98%
system - kswapd started to swap as a beast.

No problems with this.

<?php
$a=array(1);
$a[0]=&$a[0];
array_merge_recursive($a,$a);
var_dump($a);
?>
-- 
Edit bug report at http://bugs.php.net/?id=16064&edit=1
-- 
Fixed in CVS:        http://bugs.php.net/fix.php?id=16064&r=fixedcvs
Fixed in release:    http://bugs.php.net/fix.php?id=16064&r=alreadyfixed
Need backtrace:      http://bugs.php.net/fix.php?id=16064&r=needtrace
Try newer version:   http://bugs.php.net/fix.php?id=16064&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=16064&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=16064&r=notwrong
Not enough info:     http://bugs.php.net/fix.php?id=16064&r=notenoughinfo
Submitted twice:     http://bugs.php.net/fix.php?id=16064&r=submittedtwice

Reply via email to