diff -r d5fdb5c6248b -r 9d8d6d900660 bsc-projects-13.html
--- a/bsc-projects-13.html Tue Sep 24 18:27:41 2013 +0100
+++ b/bsc-projects-13.html Thu Sep 26 10:32:28 2013 +0100
@@ -68,8 +68,8 @@
innocently looking regular expression a?{28}a{28}
and match it, say, against the string
aaaaaaaaaaaaaaaaaaaaaaaaaaaa
(that is 28 a
s), you will soon notice that your CPU usage goes to 100%. In fact,
Python and Ruby need approximately 30 seconds of hard work for matching this string. You can try it for yourself:
- re.py (Python version) and
- re.rb
+ re.py (Python version) and
+ re.rb
(Ruby version). You can imagine an attacker
mounting a nice DoS attack against
your program if it contains such an “evil” regular expression. Actually