4 ms·
Would this be possible with a patch-based version control system like Darcs or Pijul? Does patch-based version control have other analogous security risks, or i
by gwerbin 9y ago
Would this be possible with a patch-based version control system like Darcs or Pijul? Does patch-based version control have other analogous security risks, or is it "better" in this case?
- fanf2 9y agoIf the patch language includes a recursive copy than it's possible to reproduce this problem in that setting.
- geezerjay 9y agoIf I understood correctly, this problem isn't caused by recursive copies but simply by expanding references. The example shows that the reference expansion leads to an exponential increase in resources required by the service.
- TeMPOraL 9y agoThis means the same in this context; if it was just expanding references one by one while walking through the tree this would not happen - the bomb requires copies of expanded references to be stored in memory.