Date: Mon, 7 Apr 2014 07:25:22 -0500 From: Mark Felder <feld@freebsd.org> To: freebsd-hackers@freebsd.org Subject: Re: pipe() resource exhaustion Message-ID: <ab57e60fcc1c1438fcca500e3c594d35@mail.feld.me> In-Reply-To: <lhu0jv$r6n$1@ger.gmane.org> References: <lhu0jv$r6n$1@ger.gmane.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2014-04-07 06:02, Ivan Voras wrote: > Hello, > > Last time I mentioned this it didn't get any attention, so I'll try > again. By accident (via a buggy synergy server process) I found that a > simple userland process can exhaust kernel pipe memory > (kern.ipc.pipekva > sysctl) which as a consequence has that new processes which use pipe > cannot be started, which includes "su", by which an administrator could > kill such a process. > That's a pretty painful local denial of service :(
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ab57e60fcc1c1438fcca500e3c594d35>