Re: Fwd: @RISK: Sun Java Floating-Point Value Denial of Service
Thomas Leonard <[email protected]>
| Newsgroups | gmane.comp.lang.e.general |
|---|---|
| Message-ID | <[email protected]> |
On 4 February 2011 00:37, Bill Frantz <[email protected]> wrote: [...] > ? def f := 2.2250738585072012e-308 > > I expect it will be fixed automagically when Java is fixed. Even when it is fixed, there are some other similar DoS problems. For example, given a remote object e.g. def service {} a client can DoS it easily with e.g. service<-__getAllegedType()<-getFQName()<-size()<-pow(2147483647) What can I do about this? (basically, any object with a method that returns a list, number or string will allow people to kill its hosting vat) -- Dr Thomas Leonard http://0install.net/ GPG: 9242 9807 C985 3C07 44A6 8B9A AE07 8280 59A5 3CC1 GPG: DA98 25AE CAD0 8975 7CDA BD8E 0713 3F96 CA74 D8BA _______________________________________________ e-lang mailing list [email protected] http://www.eros-os.org/mailman/listinfo/e-lang