64 bit libapreq2 segfaults

2009-06-29 Thread David Winter
Hi all, I'll summarize my problem: my module runs fine on 32 bit (i386) machines but segfaults constantly on 64 bit (x86_64) machines. It seems that the address returned by apreq_handle_apache2 is out of bounds, accessing it (e.g. with other libapreq2 functions) leads to a segfault. Funny

Shared memory hash table.

2009-06-29 Thread Jaysingh Samuel
Hi all, Please let me know ur comments / suggestion on the following. 1. Is there any apache apr to have shared memory hash Table. I want a hash table with is shared and should be able to access and change in runtime. We can do work around with the apr_shm and apr_rmm to achieve this. but just

Bug report for Apache httpd-1.3 [2009/06/28]

2009-06-29 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned

httpd initd daemon

2009-06-29 Thread Yahav
i would like to set the httpd instance to run as standard linux daemon. the daemon should be controlled by the init daemon. the problem is that the apachectl that runs the httpd is starting the main server process then forking N StarServers and return 0 or something else. I would like it to be

Re: httpd initd daemon

2009-06-29 Thread Graham Dumpleton
2009/6/29 Yahav bi...@lucent.com: i would like to set the httpd instance to run as standard linux daemon. the daemon should be controlled by the init daemon. the problem is that the apachectl that runs the httpd is starting the main server process then forking N StarServers and return 0 or

Re: httpd initd daemon

2009-06-29 Thread Yahav
many thanks Graham Dumpleton-2 wrote: 2009/6/29 Yahav bi...@lucent.com: i would like to set the httpd instance to run as standard linux daemon. the daemon should be controlled by the init daemon. the problem is that the apachectl that runs the httpd is starting the main server process

Re: httpd initd daemon

2009-06-29 Thread Yahav
many thanks it is working. Graham Dumpleton-2 wrote: 2009/6/29 Yahav bi...@lucent.com: i would like to set the httpd instance to run as standard linux daemon. the daemon should be controlled by the init daemon. the problem is that the apachectl that runs the httpd is starting the main

Creating a new thread inside a module

2009-06-29 Thread h iroshan
Hi All, I want to open a port to communicate my Apache hhtpd (2.2) with small software run on a separate machine .Without affecting the httpd how can i create a new thread to listen to that software. Also I want to start this thread when the mod_proxy_balancer is initialize its balancer

Re: Creating a new thread inside a module

2009-06-29 Thread Mladen Turk
h iroshan wrote: Hi All, I want to open a port to communicate my Apache hhtpd (2.2) with small software run on a separate machine .Without affecting the httpd how can i create a new thread to listen to that software. Also I want to start this thread when the mod_proxy_balancer is

Re: Using slotmem in /mod_lbmethod_heartbeat/mod_heartmonitor

2009-06-29 Thread Jim Jagielski
On Jun 24, 2009, at 8:54 AM, jean-frederic clere wrote: Paul Querna wrote: On Tue, Jun 23, 2009 at 5:35 AM, jean-frederic clerejfcl...@gmail.com wrote: Hi, I plan to use slotmem (additionally to the actual file based logic) in the heartbeat logic. HeartbeatStorage mem:logs/hb.dat

Re: mod_noloris: mitigating against slowloris-style attack

2009-06-29 Thread Jim Jagielski
On Jun 25, 2009, at 11:12 AM, William A. Rowe, Jr. wrote: Nick Kew wrote: Is this worth hacking up, or more trouble than it saves? It already lives in /repos/asf/httpd/mod_ftp/trunk/modules/ftp/ ... see the http://httpd.apache.org/mod_ftp/mod/mod_ftp.html#ftplimitloginip docs. It would be

Re: Mitigating the Slowloris DoS attack

2009-06-29 Thread Jim Jagielski
On Jun 24, 2009, at 5:18 AM, Joe Orton wrote: Regardless, the only thing I've ever wanted to see changed in the server which would somewhat mitigate this type of attack is to have coarser granularity on timeouts, e.g. per-request-read, rather than simply per-IO-operation. ++1. Timeout

Re: A modest proposal, was Re: Mitigating the Slowloris DoS attack

2009-06-29 Thread Jim Jagielski
On Jun 23, 2009, at 8:39 PM, Akins, Brian wrote: On 6/23/09 12:48 AM, Paul Querna p...@querna.org wrote: Mitagation is the wrong approach. We all know our architecture is wrong. Another heretical suggestion: Lighttpd and nginx are both release under BSD-like licenses. Hear me out. I've

Re: Creating a new thread inside a module

2009-06-29 Thread h iroshan
Hi Mladen Turk, Thank you .In Apache 2.2.x trunk there is no such a module mod_watchdog. Is this is from later version?. Can I compile this in DSO mode with mod_proxy_balancer.? Help me Iroshan. Take a look at trunk's mod_watchdog. It should compile with 2.2 without a problem. However

Re: Creating a new thread inside a module

2009-06-29 Thread h iroshan
Hi All Actually I need *to* modify *Apache* and *run* one custom background *thread *. In addition, my custom modules have *to* be able *to* access the shared memory and it should be done through the background *thread*. Did anybody do this before? Is *there* an example I can use as a starting

Re: Creating a new thread inside a module

2009-06-29 Thread Mladen Turk
h iroshan wrote: Hi All Actually I need *to* modify *Apache* and *run* one custom background *thread*. In addition, my custom modules have *to* be able *to* access the shared memory and it should be done through the background *thread*. Did anybody do this before? Is *there* an example I can

Re: Creating a new thread inside a module

2009-06-29 Thread William A. Rowe, Jr.
Mladen Turk wrote: Take a look at trunk's mod_watchdog. It should compile with 2.2 without a problem. However it requires to be statically compiled so it can survive the child death. *That's* the reason for static?!? See mod_aspdotnet and several others for how to pin a particular .so

Re: Creating a new thread inside a module

2009-06-29 Thread h iroshan
Hi Mladen Turk, Thank you very much. I roughly gone throug the mod_watchdog. I create my background thread inside the balancer_init method at mod_proxy_balancer module. But after finished the execution of balancer_init method my thread also terminate automatically. Do you or any body have idea

protocol for reporting bug that 'may' be considered exploit

2009-06-29 Thread Toadie
Hello, I think we may have discovered an issue with mod_proxy that 'could' be used as an exploit to render an Apache server useless. I normally report more benign bugs via the normal bug reporting interface. However, this one bug is quite easy to create an exploit for so I am looking for

Re: protocol for reporting bug that 'may' be considered exploit

2009-06-29 Thread Eric Covener
On Tue, Jun 30, 2009 at 12:10 AM, Toadietoadie...@gmail.com wrote: Hello, I think we may have discovered an issue with mod_proxy that 'could' be used as an exploit to render an Apache server useless. report via email to secur...@apache.org ( more detail at http://www.apache.org/security/ )

Re: Creating a new thread inside a module

2009-06-29 Thread Mladen Turk
William A. Rowe, Jr. wrote: However it requires to be statically compiled so it can survive the child death. *That's* the reason for static?!? See mod_aspdotnet and several others for how to pin a particular .so module for the lifetime of the process, instead of per-restart. Why can't we

Re: protocol for reporting bug that 'may' be considered exploit

2009-06-29 Thread Toadie
Thank you! Will file one shortly. On Mon, Jun 29, 2009 at 9:24 PM, Eric Covenercove...@gmail.com wrote: On Tue, Jun 30, 2009 at 12:10 AM, Toadietoadie...@gmail.com wrote: Hello, I think we may have discovered an issue with mod_proxy that 'could' be used as an exploit to render an Apache