There are many things that need to happen just right for PHP to be vulnerable to a buffer overflow bug. Yet that won’t stop the sensationalized stories about PHP supposedly being insecure. Ironically, this isn’t even a bug in PHP itself but in an upstream library that PHP (and other tools) use. by Eric Mann