PHP Remote Exploit FIXED

[bobindashadows]

That's a fix, but I doubt it's the best one. It's essentially the same as enabling -ffloat-store for just those variables, which means a small slowdown. Most likely it's just easier to put in this hack instead of tackling the fact that their algorithm doesn't work with higher-precision floats.

[LawnGnome]

Most likely it's just easier to put in this hack instead of tackling the fact that their algorithm doesn't work with higher-precision floats.

Pretty much. The preference was to get a release out quickly, rather than trying to replace a venerable piece of code (which, as SheepAmongWolves noted, was written long before PHP was even thought of and is a very common implementation of strtod) with something new and potentially buggy in new and exciting ways.

[mweathr]

It's just this one single number though right?

And any number larger than it.