Re: Test for DOS fix

2020-04-11 Thread dormando
Bit late in responding:

That wiki page is about the older DDoS. Not about a DoS. They're
completely different. This bug is more simply a server crash, not
convincing the server to do stupid shit.

I'm not going to write tests for it, but someone else is free to.

On Thu, 2 Apr 2020, Victor Rodriguez wrote:

> Hi memcached community
>
> I was very happy to see fixes for remote DoS (segfault) in parsing of the 
> binary protocol, introduced in 1.6.0.
>
> https://github.com/memcached/memcached/commit/02c6a2b62ddcb6fa4569a591d3461a156a636305
>
> I was wondering if we have a test case for this scenario. I was able to get 
> instructions on how the DOS attack works here
> https://github.com/memcached/memcached/wiki/DDOS
>
> however, I was wondering if we a coded test case, if not happy to write one
>
> Regards
>
> Victor Rodriguez
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups 
> "memcached" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to memcached+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/memcached/b895233f-c39c-4810-b702-3027804c5864%40googlegroups.com.
>
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"memcached" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to memcached+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/memcached/alpine.DEB.2.21.2004112011340.23694%40dskull.


Test for DOS fix

2020-04-02 Thread Victor Rodriguez
Hi memcached community

I was very happy to see fixes for remote DoS (segfault) in parsing of the 
binary protocol, introduced in 1.6.0. 

https://github.com/memcached/memcached/commit/02c6a2b62ddcb6fa4569a591d3461a156a636305

I was wondering if we have a test case for this scenario. I was able to get 
instructions on how the DOS attack works here 
https://github.com/memcached/memcached/wiki/DDOS

however, I was wondering if we a coded test case, if not happy to write one 

Regards

Victor Rodriguez

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"memcached" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to memcached+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/memcached/b895233f-c39c-4810-b702-3027804c5864%40googlegroups.com.