It would be easy to create a regex that consumes a lot of CPU power. It's very d... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Twirrim on Feb 8, 2017 \| parent \| context \| favorite \| on: Regex: badly needs fuzzing It would be easy to create a regex that consumes a lot of CPU power. It's very difficult to vet a regex in an automated fashion.

Someone1234 on Feb 8, 2017 [–]

Then don't vet it. Just run it as is, and limit how many local resources it can consume (CPU cycles and RAM). Then add on a timeout for good measure, and you are good to go.

ZoFreX on Feb 8, 2017 | [–]

Alternatively, where possible, use a regular expression engine that does not have that issue: https://swtch.com/~rsc/regexp/regexp1.html

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact