Re: Fwd: @RISK: Sun Java Floating-Point Value Denial of Service

"Mark S. Miller" <[email protected]>
Newsgroups gmane.comp.lang.e.general
Message-ID <[email protected]>
Has anyone figured out which strings will trigger the bug?
Or better, a predicate that will test whether a given string will trigger
the bug?


On Thu, Feb 3, 2011 at 4:37 PM, Bill Frantz <[email protected]> wrote:

> FYI -
>
> ====== Forwarded Message ======
> Date: 2/3/11 11:58 PM
> Received: 2/3/11 4:03 PM -0800
> From: [email protected] (The SANS Institute)
> To: [email protected]
>
>
> 11.6.25 CVE: Not Available
> Platform: Cross Platform
> Title: Sun Java Floating-Point Value Denial of Service
> Description: Sun Java is a web programming language. Java is exposed
> to a denial of service issue when processing certain double precision
> floating-point values. The problem occurs in applications that convert
> a user-supplied decimal input to a double-precision binary
> floating-point.
> Ref:
>
> http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/
> ====== End Forwarded Message ======
>
> The problem occurs when a specific floating point value is
> converted to float64. It appears to occur with E on Java (on Mac):
>
> Bill-Frantzs-MacBook-Pro:EHome frantz$ ./rune.txt
> ? 5 + 4
> # value: 9
>
> ? def f := 2.2250738585072012e-308
>
> I expect it will be fixed automagically when Java is fixed.
>
> Cheers - Bill
>
> -------------------------------------------------------------------------
> Bill Frantz        | Airline peanut bag: "Produced  | Periwinkle
> (408)356-8506 <tel:+14083568506>      | in a facility that processes   |
> 16345
> Englewood Ave
> www.pwpconsult.com | peanuts and other nuts." - Duh | Los Gatos,
> CA 95032
>
>
> _______________________________________________
> e-lang mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/e-lang
>



-- 
    Cheers,
    --MarkM

_______________________________________________
e-lang mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/e-lang
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.