Re: Re: Heap Overflow in PCRE

[Jakub Wilk <jwilk () jwilk net>]

> 3. The pattern in question for CVE-2015-3210, i.e., the 
> /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/ pattern, 
> doesn't have any instances of something like \1 or \g that are commonly 
> used for a back reference.

(?P=foo) is the Python syntax for backreference, which is supported by 
PCRE: http://pcre.org/current/doc/html/pcre2syntax.html#SEC20

--
Jakub Wilk