From: Nikolai Weibull <now@...>
Date: 2013-02-07T01:00:20+09:00
Subject: [ruby-core:51927] Re: [ruby-trunk - Feature #7791][Open] Let symbols be garbage collected

On Wed, Feb 6, 2013 at 2:37 PM, rosenfeld (Rodrigo Rosenfeld Rosas)
<rr.rosas@gmail.com> wrote:

> Lots of Denial-of-Service security vulnerabilities exploited in Ruby programs rely on symbols not being collected by garbage collector.

I���m out of the loop on this one.  I���m assuming that this occurs when a
program creates a lot of symbols based on user input.  If that���s the
attack vector, shouldn���t that be fixed instead of letting the GC
collect Symbols, which, as has already been stated, seems very hard to
do correctly, if at all?