Fwd: @RISK: Sun Java Floating-Point Value Denial of Service
Bill Frantz <[email protected]>
| Newsgroups | gmane.comp.lang.e.general |
|---|---|
| Message-ID | <r314ps-1066i-0C3C38CE4646429FB259A37912920106@Bill-Frantzs-MacBook-Pro.local> |
FYI - ====== Forwarded Message ====== Date: 2/3/11 11:58 PM Received: 2/3/11 4:03 PM -0800 From: [email protected] (The SANS Institute) To: [email protected] 11.6.25 CVE: Not Available Platform: Cross Platform Title: Sun Java Floating-Point Value Denial of Service Description: Sun Java is a web programming language. Java is exposed to a denial of service issue when processing certain double precision floating-point values. The problem occurs in applications that convert a user-supplied decimal input to a double-precision binary floating-point. Ref: http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/ ====== End Forwarded Message ====== The problem occurs when a specific floating point value is converted to float64. It appears to occur with E on Java (on Mac): Bill-Frantzs-MacBook-Pro:EHome frantz$ ./rune.txt ? 5 + 4 # value: 9 ? def f := 2.2250738585072012e-308 I expect it will be fixed automagically when Java is fixed. Cheers - Bill ------------------------------------------------------------------------- Bill Frantz | Airline peanut bag: "Produced | Periwinkle (408)356-8506 | in a facility that processes | 16345 Englewood Ave www.pwpconsult.com | peanuts and other nuts." - Duh | Los Gatos, CA 95032