https://bugzilla.wikimedia.org/show_bug.cgi?id=189
--- Comment #82 from Aryeh Gregor <[email protected]> 2009-05-05 16:58:42 UTC --- (In reply to comment #81) > Well, as I saw at Comment #55 and at > http://lists.gnu.org/archive/html/lilypond-devel/2009-02/msg00022.html > the item (b) pointed by Tim (in comment #37) is not really a issue, am I > right? I should think not. Even if most music won't work, it's a wiki, people can adapt it or rewrite it. > But in the same message Graham Percival said that "trying to keep lilypond > within certain CPU-time limits is going to be hard". Would this be solved by > doing what Dscho said at > http://lists.gnu.org/archive/html/lilypond-devel/2009-02/msg00023.html > ? You mean: > But we could add a simple timeout that says "if this fails to > terminate in 20 seconds, it errors _out_". I assume that would address all DoS concerns, if memory and disk use are also limited (either explicitly, or as a practical matter). I'd assume that any reasonable score could be created in well under 20 seconds. It wouldn't be ideal, though. It would lead to intermittent failure for input that's close to the limit, and it might cause occasional failures if the server is under high load briefly for some reason. For wikitext, which can also be very slow, we have limits like "no more than X of this instruction" instead, calibrated so as to make DoS unlikely. Likewise, for ImageMagick I believe we have pixel limits on what images it will try to resize. This way the software behaves consistently regardless of server load or other hard-to-control factors, but it's harder to do, of course. > After this, was said that "Scheme just should be disabled for the purpose of > the MediaWiki extension." > (http://lists.gnu.org/archive/html/lilypond-devel/2009-04/msg00265.html). How > much of the issues would be solved with this? I'd assume that disabling Scheme would be necessary, but not sufficient. > By the way, I've found this other discussion, now about a new extension ABC > http://lists.wikimedia.org/pipermail/wikitech-l/2008-October/039988.html > > I would like to know if the 3 questions Brion asked about it are also to be > considered in the context of LilyPond extension? I guess . . . those are infrastructural issues, not related to LilyPond itself but to how the images are stored and so on, issues that the MediaWiki extension would have to deal with. Currently we have a fairly ugly system for math images, where they're stored on NFS and not ever expired. I don't know if adapting a similar system would be acceptable or not. I'll try getting Tim or Brion to reply to your questions so you can get a more definite answer. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. You are the assignee for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
