httpd-modules-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Some Guy <teknos...@gmail.com>
Subject Re: Process lifetime and hooks to use
Date Mon, 19 Apr 2010 00:51:45 GMT
Ah great.  I know what I should do with that.  Any insight on the
differences in MPMs and what to watch out for?

On Sun, Apr 18, 2010 at 12:22 PM, William A. Rowe Jr.
<wrowe@rowe-clan.net>wrote:

> On 4/18/2010 2:34 AM, alin vasile wrote:
> > the monitor hook gets only a pointer to an apr_pool_t structure.
>
> Take a look at apr_pool_data_* API's, that should provide you all of the
> context and persistence you need.
>
> You will never see anything about servers, connections or requests because
> this is running in the *parent*, it is blissfully unaware of specific
> requests
> and is therefore immune from being hijaaked by remote code execution and
> less
> severe but destabilizing attacks on the request processing code itself.
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message