Begin forwarded message:

Date: Thu, 9 Feb 2006 06:46:33 -0800
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Bugme-new] [Bug 6036] New: mmap'ed write to socket hangs when 
connection remote end is broken


http://bugzilla.kernel.org/show_bug.cgi?id=6036

           Summary: mmap'ed write to socket hangs when connection remote end
                    is broken
    Kernel Version: 2.6.14.3-grsec
            Status: NEW
          Severity: blocking
             Owner: [EMAIL PROTECTED]
         Submitter: [EMAIL PROTECTED]


Most recent kernel where this bug did not occur: N/A
Distribution: Debian
Hardware Environment: x86_64
Software Environment: GNU/Linux
Problem Description:
Server hangs in write of a mmap-ed file to a socket viw a single write
system call when connection is broken from client side. This causes a
denial of service vulnerability in server, as client can open and hang
many server instances.

Steps to reproduce:
Server: open socket
        bind
        listen
        enter accept
Client: open socket
        connect to server
Server: connection accepted
Client: send() request
Server: recv() request
        mmap a file to region
Client: CTRL+C (unclean exit)
Server: write (conn_fd, region, sizeof (region));
Server: hangs in write() call. CTRL+C kills it, but server should die
        in normal cleanup unmaintained
        alarm() doesn't awake or interrupt write()

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to