logoalt Hacker News

pizlonator • today at 3:44 PM • 1 reply • view on HN

This is all it takes to port PHP to Fil-C and according to our tests this turns all of the exploits into DoS

https://github.com/pizlonator/fil-c/blob/deluge/projects/php...


Replies

throwaway800BC • today at 4:39 PM

Awesome that you looked into this!

Have you been able to run any benchmarks? (Are there any benchmarks for this kind of thing?) IDK, seems kind of silly when talking about PHP and webservers but people were concerned when I suggested it in the original thread.

In particular, it is mentioned that the `Zend` allocator does not play well with fine-grained tracking (so would not have caught this issue?) and you need to swap to the system allocator.