Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bignumber: fix ida in regex #1976

Closed

Conversation

ChALkeR
Copy link

@ChALkeR ChALkeR commented Aug 31, 2021

Fixes #1975.

Note: it fixes only the ReDoS part of the problem without touching the logic, but the same a9cdbe1 commit also introduced an actual logic problem resulting in a miscalculation, see #1974.

@ricmoo
Copy link
Member

ricmoo commented Sep 16, 2021

Fixed in 5.4.7. See #1975 for more info.

Thanks again! :)

@ricmoo ricmoo closed this Sep 16, 2021
@ricmoo ricmoo added enhancement New feature or improvement. fixed/complete This Bug is fixed or Enhancement is complete and published. labels Oct 20, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or improvement. fixed/complete This Bug is fixed or Enhancement is complete and published.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

bignumber: parseFixed now contains a ReDoS since a9cdbe1238c149a7167c6bb1a78f314805b52755
2 participants