3 messages in ru.sysoev.nginxRe: Possible DoS in nginx 0.5.31 with...
FromSent OnAttachments
areq...@public.gmane.orgSep 22, 2007 10:15 am 
Igor SysoevSep 22, 2007 10:41 am.txt
Arkadiusz PatykSep 22, 2007 11:01 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: Possible DoS in nginx 0.5.31 with autoindex on;Actions...
From:Arkadiusz Patyk (areq@public.gmane.org)
Date:Sep 22, 2007 11:01:08 am
List:ru.sysoev.nginx

On Sat, 22 Sep 2007 21:41:50 +0400, you wrote:

On Sat, Sep 22, 2007 at 07:15:26PM +0200,
areq-If217g9+LgpA@public.gmane.org wrote:

I discovered than nginx don't close opened directory after HEAD:

echo -e "HEAD / HTTP/1.1\r\nHost: pld.areq.eu.org\r\n\r\n" | nc 10.9.31.6 80 lsof: nginx 10066 nginx 21r DIR 9,0 18 402653312 /vol/mirror/ftp.pld-linux.org nginx 10066 nginx 22r DIR 9,0 18 402653312 /vol/mirror/ftp.pld-linux.org

each HEAD on dir increase number of opened files.

Thank you. The attached patch fixes the bug.

Thank, now it's work fine.

Cheers,

-- Arkadiusz Patyk [areq<>pld-linux:org] [http://rescuecd.pld-linux.org/] [IRC:areq skype:arekpatyk GG:1383 jid:arek<>patyk:net]