httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From dave b <>
Subject Re: rational behind not checking the return value of apr_palloc and apr_pcalloc
Date Fri, 03 Sep 2010 19:24:14 GMT
> "first the attacker has to find  a way to reduce system memory to an
> almost oom condition"
> Say, by attacking several httpd threads and/or unrelated processes to
> get them to eat up memory.
> --
> Sent from my toaster.

If you know something why not share it ;) ?
imho Apache is pretty good - so perhaps you could find a commonly used
module that leaks memory?

Also, I hope your toaster is running netbsd with apache ^^

As flies to wanton boys are we to the gods; they kill us for their
sport.		-- Shakespeare, "King Lear"

View raw message