Re: [AOLSERVER] Ns_ConnReadLine return codes

2005-06-19 Thread Martin Saturka
I can not find other places with 'maxline' configuration usage. The Ns_ConnReadLine function ... the reason is it's not called anywhere which is a result of the new I/O model in 4.0. Thank you for your explanation. In fact, I do not want to use the old API. I just want to use 'maxline'

Re: [AOLSERVER] Ns_ConnReadLine return codes

2005-06-19 Thread Jim Davidson
In a message dated 6/19/05 5:51:32 AM, [EMAIL PROTECTED] writes: My reason for the 'maxline' usage is to cut off strange kiddies e.g., ones that try to exploit ms-iis bugs on any server. Ah -- then check for maxline in driver.c. I found the following config: if (!Ns_ConfigGetInt(path,

Re: [AOLSERVER] Ns_ConnReadLine return codes

2005-06-19 Thread Dossy Shiobara
On 2005.06.19, Jim Davidson [EMAIL PROTECTED] wrote: btw: is the default 4k max, 256byte min reasonable? While HTTP dictates no minimum, but there are headers like Cookie: sent in the HTTP request can be up to 4K in size, so I think the min should be at least 4K, otherwise legitimate requests

Re: [AOLSERVER] Ns_ConnReadLine return codes

2005-06-19 Thread Martin Saturka
On 6/19/05, Jim Davidson [EMAIL PROTECTED] wrote: and the following limit check: /* * Check for max single line overflow. */ if ((e - s) drvPtr-maxline) { return E_LRANGE; } I was looking for it in 4.0.10 release, since it