From: Matthew Kerwin Date: 2013-02-07T06:20:12+09:00 Subject: Re: Symbol.defined? --f46d044630d229b49f04d514e4aa Content-Type: text/plain; charset=ISO-8859-1 On 6 February 2013 20:10, Intransition wrote: > While on the topic, I have a related question about this Symbol DOS attack > vector: Can't an upper limit be put on the size of the symbols table, and > if it is exceeded, then an error is raised? Wouldn't that alone be > sufficient to neuter such an attack? Or, rather than error, just flush a bunch. If they're needed, they'll come back. If not, no loss. I'm sure symbol creation isn't _that_ expensive. -- Matthew Kerwin, B.Sc (CompSci) (Hons) http://matthew.kerwin.net.au/ ABN: 59-013-727-651 "You'll never find a programming language that frees you from the burden of clarifying your ideas." - xkcd --f46d044630d229b49f04d514e4aa Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
On 6 February 2013 20:10, Intransition &= lt;transfire@gmail= .com> wrote:
While on the topic, I have a related questio= n about this Symbol DOS attack vector: Can't an upper limit be put on t= he size of the symbols table, and if it is exceeded, then an error is raise= d? Wouldn't that alone be sufficient to=A0neuter=A0such an attack?

Or, rather than error, just flus= h a bunch. =A0If they're needed, they'll come back. If not, no loss= . =A0I'm sure symbol creation isn't _that_ expensive.


--
=A0 Matthew Kerwin, B.Sc (CompSci) (Hons)
=A0 http://matthew.kerw= in.net.au/
=A0 ABN: 59-013-727-651

=A0 "You'll never= find a programming language that frees
=A0 you from the burden of clarifying your ideas." - xkcd
--f46d044630d229b49f04d514e4aa--