2 ms·
Even in collections, an unstable hash is desirable -- to avoid denial of service attacks caused by attacker-controlled hash collisions. For example, Python bac
by andrewaylett 1y ago
Even in collections, an unstable hash is desirable -- to avoid denial of service attacks caused by attacker-controlled hash collisions.
For example, Python back in 2012: https://nvd.nist.gov/vuln/detail/cve-2012-1150 https://nvd.nist.gov/vuln/detail/cve-2012-1150.
- pfdietz 1y agoOr the hash table implementation should be resistant to collisions, falling back to another data structure in that case (as described below, using trees instead of lists in buckets with sufficiently many occupants.)
- ivan_gammel 1y agoThere exists CVE-2012-5373 for Java and it is not fixed because it is not a risk worth taking care of.