Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Aug 1998 15:47:21 +0200
From:      Mark Huizer <freebsd@xaa.iae.nl>
To:        Tom <tom@uniserve.com>
Cc:        Dusk Auriel Sykotik <syko@sykotik.org>, Bruce Evans <bde@zeta.org.au>, dg@root.com, narvi@haldjas.folklore.ee, freebsd-current@FreeBSD.ORG
Subject:   Re: memory leaks in libc
Message-ID:  <19980807154721.A865@xaa.iae.nl>
In-Reply-To: <Pine.BSF.3.96.980806093206.222C-100000@shell.uniserve.ca>; from Tom on Thu, Aug 06, 1998 at 09:35:47AM -0700
References:  <19980806181215.A7652@xaa.iae.nl> <Pine.BSF.3.96.980806093206.222C-100000@shell.uniserve.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
> > Hmm... then we should write a nice DoS attack for apache, would that be a
> > reason for solving it?
> 
>   Couldn't be done.  CGI scripts are so short lived, that that memory gets
> cleaned up on its own anyhow.  Perhaps specific a DoS attack could be
> tailored to a specific CGI script, but I would argue that the CGI script
> is broken.  CGI is used less and less anyhow, as peole use better and
> faster methods of server side scripting.
> 
OK, how come a poor little apache server doesn't like this:

GET / HTTP/1.0
User-Agent: a
User-Agent: aaaaaaaaaaaaaaaaaaaaaa
(repeat last 2 lines 20000 times)
(empty line)

apache on a Linux machine here is still thinking about wheterh or not to 
return 100M, time to test it on my home FreeBSD server :-)

Mark
-- 
Nice testing in little China...

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980807154721.A865>