Bug Bounty program

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • Thomas Pedoussaut

    #1

    Bug Bounty program

    Hi,

    I'm (I mean the company I work for) slightly blocked in the developement /
    deployment of a new website due to a bug in php. We reported it about 6
    weeks ago. I don't think it's a big job to solve but it requires knowledge
    of the internals of PHP and access to a x86_64 plateform.

    The company is obviously OK to put some cash to have this fixed.

    Is there a marketpalce somewhere where I could put the bounty offer.

    Cheers.

    --
    Thomas
  • lorento

    #2
    Re: Bug Bounty program

    What type of bug of php did you got? Have you reported to php.net? So
    they can fix it in the next release.

    --

    On Feb 1, 4:38 pm, Thomas Pedoussaut <tho...@parinux .orgwrote:
    Hi,
    >
    I'm (I mean the company I work for) slightly blocked in the developement /
    deployment of a new website due to a bug in php. We reported it about 6
    weeks ago. I don't think it's a big job to solve but it requires knowledge
    of the internals of PHP and access to a x86_64 plateform.
    >
    The company is obviously OK to put some cash to have this fixed.
    >
    Is there a marketpalce somewhere where I could put the bounty offer.
    >
    Cheers.
    >
    --
    Thomas

    Comment

    • Thomas Pedoussaut

      #3
      Re: Bug Bounty program

      On Thu, 01 Feb 2007 01:43:50 -0800, lorento wrote:
      What type of bug of php did you got? Have you reported to php.net? So
      they can fix it in the next release.
      Someone else reported it 3 days before me.


      We'd like not to wait for the next release if possible, hence the bounty.

      --
      Thomas

      Comment

      • Sanders Kaufman

        #4
        Re: Bug Bounty program

        Thomas Pedoussaut wrote:
        On Thu, 01 Feb 2007 01:43:50 -0800, lorento wrote:
        >
        >What type of bug of php did you got? Have you reported to php.net? So
        >they can fix it in the next release.
        >
        Someone else reported it 3 days before me.

        >
        We'd like not to wait for the next release if possible, hence the bounty.
        You might want to consider a conditional work-around, instead of
        trying to create your own, custom version of PHP.

        Especially with the particular bug you're trying to address.

        Comment

        • Jerry Stuckle

          #5
          Re: Bug Bounty program

          Thomas Pedoussaut wrote:
          On Thu, 01 Feb 2007 01:43:50 -0800, lorento wrote:
          >
          >What type of bug of php did you got? Have you reported to php.net? So
          >they can fix it in the next release.
          >
          Someone else reported it 3 days before me.

          >
          We'd like not to wait for the next release if possible, hence the bounty.
          >
          I agree with Sanders. You really don't want a custom version of PHP.
          For instance, whomever patches it may not do it the same as the PHP
          developers, and the results may be different.

          But on a more realistic issue - I can't believe this has been a problem
          since PHP 4.4.4 and not reported before this. I suspect there is
          something else which you haven't discovered yet.

          Or maybe it's just an incompatibility between the sybase libs compiled
          in to PHP and the ones you are using on your system. Did you try to
          recompile the PHP source, for instance?

          --
          =============== ===
          Remove the "x" from my email address
          Jerry Stuckle
          JDS Computer Training Corp.
          jstucklex@attgl obal.net
          =============== ===

          Comment

          Working...