Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of hyperhacker@gmail.com
 designates 209.85.214.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=kr/dxlU9+wCRIs0nCdaWG9+aWK+ha7D2ZupPNpEIyABUMlDnowcy5sGfwRwDqhhI2w
         wWA1uiHbMY9RYPz7K0C6yHDenFxVAKDOX6Kb/BIJ+Cws4L3XT+lzGD9FoFEBzavETaJa
         RopiCBT3Ka7Wf6s8rur7G2TTjOszhQoGTlGks=
MIME-Version: 1.0
In-Reply-To: <AANLkTimPj1dc-t34=ox1ZTC=Yy8CdE=ZBxOFNe5uT3CF@mail.gmail.com>
References: <AANLkTimpj95FqAPnwxrX8trDcDiCuVvt7E49zZkAf94e@mail.gmail.com>
	<EFE1E1F3-EB9F-47DE-BE52-DF448B23ECF5@sharp.fm>
	<AANLkTi=eqra5T1qMiiF0zirtTZv3id_wur0Jai9KfVy2@mail.gmail.com>
	<AANLkTi=xHOTTb9cjhPhBjY2VmJRYOQZKTFKfL20P1Opf@mail.gmail.com>
	<AANLkTikN8-twtJUXADc3H5KQof6+8mAdMU0e277SzRbd@mail.gmail.com>
	<AANLkTimHSUF5SQKcvpPMFcHwTRYTbX9U=FXK=gf=9Riv@mail.gmail.com>
	<AANLkTin0m+D38VEs_4LicVRVW8ZcXrofY4k7ogYMG7qS@mail.gmail.com>
	<AANLkTi=a-QD81ziyFb2LTYtr94Nfg-m8zTPSD277noZm@mail.gmail.com>
	<AANLkTimhtYdbQqk928srGojdhVxT==jgjm5JG=9Bpup4@mail.gmail.com>
	<4C7F1A24.9090905@rowe-clan.net>
	<4C7FF9E2.1070006@rowe-clan.net>
	<AANLkTinntEk=yNnckNZEfNNfgqQ96NC9G7zkfvgXbZ1z@mail.gmail.com>
	<6DBB8A57-7BA4-4F75-9371-2FB618108E3C@sharp.fm>
	<AANLkTinbA7572DdKjqfhWEwhimj1uBULF9cgxU35srun@mail.gmail.com>
	<6114AB6A-C35C-4419-A732-9EAED8E534BF@sharp.fm>
	<AANLkTimYqMgdeFZ7jEQk-U_7B6ZtkyLPVAH6stE2goQ3@mail.gmail.com>
	<AANLkTimPj1dc-t34=ox1ZTC=Yy8CdE=ZBxOFNe5uT3CF@mail.gmail.com>
Date: Fri, 3 Sep 2010 16:22:49 -0600
Message-ID: <AANLkTim2ejhn9-Uk2doxy92t2ZT+jyGFQ2qeG5LoOfjM@mail.gmail.com>
Subject: Re: rational behind not checking the return value of apr_palloc and
 apr_pcalloc
From: HyperHacker <hyperhacker@gmail.com>
To: dev@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Fri, Sep 3, 2010 at 13:24, dave b <db.pub.mail@gmail.com> wrote:
>> "first the attacker has to find =A0a way to reduce system memory to an
>> almost oom condition"
>> Say, by attacking several httpd threads and/or unrelated processes to
>> get them to eat up memory.
>>
>> --
>> Sent from my toaster.
>>
>
> If you know something why not share it ;) ?
> imho Apache is pretty good - so perhaps you could find a commonly used
> module that leaks memory?
>
> Also, I hope your toaster is running netbsd with apache ^^
>
> --
> As flies to wanton boys are we to the gods; they kill us for their
> sport. =A0 =A0 =A0 =A0 =A0-- Shakespeare, "King Lear"
>

Just tossing around ideas. What's the threshold for killing these
child processes? What prevents someone from bringing several to just
below that threshold?

--=20
Sent from my toaster.