From owner-freebsd-current  Fri Aug  7 06:47:43 1998
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id GAA06845
          for freebsd-current-outgoing; Fri, 7 Aug 1998 06:47:43 -0700 (PDT)
          (envelope-from owner-freebsd-current@FreeBSD.ORG)
Received: from esmeralda.xaa.iae.nl (esmeralda.xaa.iae.nl [194.151.75.9])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA06840
          for <freebsd-current@FreeBSD.ORG>; Fri, 7 Aug 1998 06:47:41 -0700 (PDT)
          (envelope-from freebsd@xaa.iae.nl)
Received: from ariel.xaa.iae.nl (ariel.xaa.iae.nl [194.151.75.10])
	by esmeralda.xaa.iae.nl (8.8.8/8.8.7) with ESMTP id PAA10230;
	Fri, 7 Aug 1998 15:47:22 +0200 (MET DST)
	(envelope-from freebsd@xaa.iae.nl)
Received: by ariel.xaa.iae.nl (VMailer, from userid 1008)
	id E61F24568; Fri,  7 Aug 1998 15:47:21 +0200 (CEST)
Message-ID: <19980807154721.A865@xaa.iae.nl>
Date: Fri, 7 Aug 1998 15:47:21 +0200
From: Mark Huizer <freebsd@xaa.iae.nl>
To: Tom <tom@uniserve.com>
Cc: Dusk Auriel Sykotik <syko@sykotik.org>, Bruce Evans <bde@zeta.org.au>,
        dg@root.com, narvi@haldjas.folklore.ee, freebsd-current@FreeBSD.ORG
Subject: Re: memory leaks in libc
References: <19980806181215.A7652@xaa.iae.nl> <Pine.BSF.3.96.980806093206.222C-100000@shell.uniserve.ca>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.93.2i
In-Reply-To: <Pine.BSF.3.96.980806093206.222C-100000@shell.uniserve.ca>; from Tom on Thu, Aug 06, 1998 at 09:35:47AM -0700
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> > Hmm... then we should write a nice DoS attack for apache, would that be a
> > reason for solving it?
> 
>   Couldn't be done.  CGI scripts are so short lived, that that memory gets
> cleaned up on its own anyhow.  Perhaps specific a DoS attack could be
> tailored to a specific CGI script, but I would argue that the CGI script
> is broken.  CGI is used less and less anyhow, as peole use better and
> faster methods of server side scripting.
> 
OK, how come a poor little apache server doesn't like this:

GET / HTTP/1.0
User-Agent: a
User-Agent: aaaaaaaaaaaaaaaaaaaaaa
(repeat last 2 lines 20000 times)
(empty line)

apache on a Linux machine here is still thinking about wheterh or not to 
return 100M, time to test it on my home FreeBSD server :-)

Mark
-- 
Nice testing in little China...

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message