-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Closed as not planned
Labels
area-metaCross-cutting, high-level issues (for tracking many other implementation issues, ...).Cross-cutting, high-level issues (for tracking many other implementation issues, ...).closed-staleClosed as the issue or PR is assumed staleClosed as the issue or PR is assumed staletype-bugIncorrect behavior (everything from a crash to more subtle misbehavior)Incorrect behavior (everything from a crash to more subtle misbehavior)type-security
Description
DoS using hashmap collisions
dart/runtime/vm/object.cc
6156 hash_ += ch;
6157 hash_ += hash_ << 10;
6158 hash_ ^= hash_ >> 6;
hash(attacker-supplied data) can be predicted
if hashmap is used on attacker-supplied keys, attacker can cause O(n^2) operations on the hashmap
background: http://www.youtube.com/watch?v=R2Cq3CLI6H8
solution: follow-up with Erik / apply same counter measures as V8
Metadata
Metadata
Assignees
Labels
area-metaCross-cutting, high-level issues (for tracking many other implementation issues, ...).Cross-cutting, high-level issues (for tracking many other implementation issues, ...).closed-staleClosed as the issue or PR is assumed staleClosed as the issue or PR is assumed staletype-bugIncorrect behavior (everything from a crash to more subtle misbehavior)Incorrect behavior (everything from a crash to more subtle misbehavior)type-security