PHP 4 - Reference Counter Overflow Fix

Stefan Esser氏によるパッチが公開されています。

Because the PHP developers do not want to fix the PHP 4 Reference Counter Overflow Vulnerability that was disclosed during the Month of PHP Bugs the Hardened-PHP Project as usual had to step in to protect the users of PHP.

I created a patch for the refcount overflow problem that took about 30 minutes to develop and that fixes the problem without breaking binary compatibility.

このネタ、PHP-DEVから続いているんですが、上の引用やEsser氏のblogのコメントにもある通り、かなりギスギスしてます。。。:-(