Re: PCRE v2 compile error, was Re: What's cooking in git.git (May 2017, #01; Mon, 1)
- From
- demerphq <demerphq@gmail.com>
- Date
- May 9, 2017, 14:22 UTC
- Message-ID
- <CANgJU+Vc2EC6o9CQ8O_Q52u0Q=3rkQDWafYWs9DzsFACBzX3Lw@mail.gmail.com>
- In-Reply-To
- <CACBZZX6V8qbnrZAdhRvPthy5Z91iEG8rrJ=Sf9tdkOt52M9j1Q@mail.gmail.com>
On 9 May 2017 at 13:12, Ævar Arnfjörð Bjarmason <avarab@gmail.com> wrote:
Show 7 quoted lines
> On Tue, May 9, 2017 at 2:37 AM, brian m. carlson > <sandals@crustytoothpaste.net> wrote: >> On Tue, May 09, 2017 at 02:00:18AM +0200, Ævar Arnfjörð Bjarmason wrote: > * gitweb is vulnerable to CPU DoS now in its default configuration. > It's easy to provide an ERE that ends up slurping up 100% CPU for > several seconds on any non-trivial sized repo, do that in parallel & > you have a DoS vector.
Does one need an ERE? Can't one do that now to many parts of git just with a glob?
Yves