This is a little OT, but just out of curiosity, has anybody been successful in gaining root/tomcat/whatever-uid shell by capitalizing on a JVM's (not necessarily tomcat's) core dump? I've always wondered if that was possible. I know its extremely hard (impossible?) to "consistently" overflow JVM's stack, but has it ever been done?I've had the displeasure of experiencing a Tomcat JVM core dump on me not too long ago (in a multi-user development environment, fortunately) on a Sparc/Solaris box. It turned out to be due to insufficient swap memory in the system. I didn't see any OutOfMemoryExceptions raised prior to the crash, so it wasn't that obvious, but the top command came to the rescue in the end.
Good one ;) It reminds of another time, where I had internal crashes occurring due to a low limit of file descriptors (ulimit -a will show you the limits). That one was frustrating ;) I'm sure many people on this list of horror stories with seemingly random crashes...
I've experienced even more random crashes (SEGV). It turned out to be bad memory (or bus), and it only showed up under pretty heavy load. :(
-- A
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
