News for hackers. Stuff that matters.

A comment on SQL Injection Vulnerability in Ruby on Rails; affects all versions. Parent comment

Re:SQL Injection Vulnerability in Ruby on Rails; affects all... by cheald on Wednesday January 02, 2013 @10:20PM (#5000881)
Symbols are interned and never garbage collected, so if you can cause an app to create arbitrary symbols, you can cause it to use up all the RAM on the machine and throw it into swap, effectively killing its ability to respond to requests in any kind of timely fashion.
[ Parent | on HN ]

There are no comments on this comment yet.