Re: Fwd: @RISK: Sun Java Floating-Point Value Denial of Service
"Mark S. Miller" <[email protected]>
| Newsgroups | gmane.comp.lang.e.general |
|---|---|
| Message-ID | <[email protected]> |
Has anyone figured out which strings will trigger the bug? Or better, a predicate that will test whether a given string will trigger the bug? On Thu, Feb 3, 2011 at 4:37 PM, Bill Frantz <[email protected]> wrote: > FYI - > > ====== Forwarded Message ====== > Date: 2/3/11 11:58 PM > Received: 2/3/11 4:03 PM -0800 > From: [email protected] (The SANS Institute) > To: [email protected] > > > 11.6.25 CVE: Not Available > Platform: Cross Platform > Title: Sun Java Floating-Point Value Denial of Service > Description: Sun Java is a web programming language. Java is exposed > to a denial of service issue when processing certain double precision > floating-point values. The problem occurs in applications that convert > a user-supplied decimal input to a double-precision binary > floating-point. > Ref: > > http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/ > ====== End Forwarded Message ====== > > The problem occurs when a specific floating point value is > converted to float64. It appears to occur with E on Java (on Mac): > > Bill-Frantzs-MacBook-Pro:EHome frantz$ ./rune.txt > ? 5 + 4 > # value: 9 > > ? def f := 2.2250738585072012e-308 > > I expect it will be fixed automagically when Java is fixed. > > Cheers - Bill > > ------------------------------------------------------------------------- > Bill Frantz | Airline peanut bag: "Produced | Periwinkle > (408)356-8506 <tel:+14083568506> | in a facility that processes | > 16345 > Englewood Ave > www.pwpconsult.com | peanuts and other nuts." - Duh | Los Gatos, > CA 95032 > > > _______________________________________________ > e-lang mailing list > [email protected] > http://www.eros-os.org/mailman/listinfo/e-lang > -- Cheers, --MarkM _______________________________________________ e-lang mailing list [email protected] http://www.eros-os.org/mailman/listinfo/e-lang