[Patch, PR 61061] Add state limit for regex NFA

Jonathan Wakely jwakely@redhat.com
Thu Jul 17 10:38:00 GMT 2014


On 17/07/14 12:24 +0200, Maksymilian A wrote:
>Hi Jonathan,
>
>The default value for mentioned 'pre set level' isn't specified. I

Of course not. The standard does not know how an implementation works
or what is considered too complex for every system. A single value
would not make sense for all systems, from embedded microcontrollers
to supercomputers.

>think that we need new safe and extended RE type or user should
>determine security level of complexity.

I don't think that's a good idea.



More information about the Libstdc++ mailing list