Re: Re: Re: Re: Re: Re: CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match()

[Guanxing Wen <wengx522 () gmail com>]

Thanks for your explanation.
 It has also been confirmed from PHP that this is not a bug of their
product:

"
We cannot do much for it.
Increase the stack of your server (apache has an option for that for
example) or simplify your regex.
One should really not feed pcre with custom inputs :)
"

Cheers, Wen.
----org----

AFAIK this is not a bug on PHP at all, this is a long time known issue
on PCRE lib instead.
Check the documentation for futher
details:http://pcre.org/current/doc/html/pcre2stack.html