3 ms·

Nice find! Btw: Is it correct that this won't get fixed in Debian because it isn't a security issue?

• matheweis 10y ago
  Not sure on the current Debian policy but this bug could certainly be framed as a potential security issue; exploiting the bug could result in resource exhaustion and denial of service.
  • ensiferum 10y ago
    Exploited by who? The programmers ?
    • tacostakohashi 10y ago
      The users. Anybody who can connect to a server implemented in C++ can compiled by a gcc with this problem.
      • matheweis 10y ago
        I think it's not quite that severe; anybody who can connect to a server implemented in C++ that is compiled with gcc and initializes objects in the way described here could exploit the bug.
        • mbrubeck 10y ago
          And the initialization needs to conditionally throw an exception based on user input.
  • xorblurb 10y ago
    For released distro, I doubt Debian will rebuild all their packages and upload them all on security.debian.org...