This is a real bug.
Here is the patch that fixes it. http://git.php.net/?p=php-src.git;a=commitdiff;h=0863a0d6a0f740874b4ef8dc732a4ec94949470c
Here is the bug I filed in the debian BTS. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752366
Without this patch an attacker can launch a denial of service on the server due to resource exhaustion if he knows of a script to target.
This is a real bug.
Here is the patch that fixes it. git.php. net/?p= php-src. git;a=commitdif f;h=0863a0d6a0f 740874b4ef8dc73 2a4ec94949470c
http://
Here is the bug I filed in the debian BTS. /bugs.debian. org/cgi- bin/bugreport. cgi?bug= 752366
https:/
Without this patch an attacker can launch a denial of service on the server due to resource exhaustion if he knows of a script to target.