Your message dated Sat, 21 Aug 2010 22:51:39 +0200
with message-id <20100821205139.ga10...@phenomenon>
and subject line Re: Bug#508821: mozilla-plugin-gnash: litters the process
space with zombie processes, please waitpid them
has caused the Debian Bug report #508821,
regarding mozilla-plugin-gnash: litters the process space with zombie
processes, please waitpid them
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
508821: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508821
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mozilla-plugin-gnash
Version: 0.8.4-2
Severity: important
The gnash plugin seems to not waitpid for children and that way litters
the process space. For instance liferea has 24 dead gtk-gnash children
on my system.
It looks likely to be easy to create these zombies using specially
crafted websites. So only by viewing a web page it should be possible to
consume the process space and that way cause a denial of service.
It should be possible to frequently invoke waitpid using WNOHANG.
Helmut
-- System Information:
Debian Release: 5.0
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.23.14 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Versions of packages mozilla-plugin-gnash depends on:
ii gnash 0.8.4-2 free SWF movie player
ii libc6 2.7-16 GNU C Library: Shared libraries
ii libgcc1 1:4.3.2-1 GCC support library
ii libglib2.0-0 2.16.6-1 The GLib library of C routines
ii libldap-2.4-2 2.4.11-1 OpenLDAP libraries
ii libstdc++6 4.3.2-1 The GNU Standard C++ Library v3
ii libx11-6 2:1.1.5-2 X11 client-side library
ii libxi6 2:1.1.4-1 X11 Input extension library
mozilla-plugin-gnash recommends no packages.
mozilla-plugin-gnash suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
--- End Message ---