A DoS Attack Against the C# Compiler

Re:A DoS Attack Against the C# Compiler by al2o3cr on Wednesday November 08, 2017 @07:37PM (#15658654)

The "levels" that are being changed are the number of nested `Inner`s - the decompiled example is

    Inner.Inner inner

("Level 2" in the article's terms) but the crashing one is

    Inner.Inner.Inner.Inner.Inner.Inner.Inner.Inner.Inner.Inner inner

Your calculation of the variable references is correct, but the thing the article's experiment varies is the exponent.

[ Parent | on HN ]

Re:A DoS Attack Against the C# Compiler by ScottBurson on Wednesday November 08, 2017 @08:24PM (#15658918)

Ah, I see — it's cubic in the number of type parameters, but it's exponential in the depth of the type reference in the field declaration. My bad; I didn't read carefully enough.

[ Parent | on HN ]