Bug still present in squeeze and testing. However, the value of memory_limit in /etc/php5/cli/php.ini appears to still be checked by suhosin. In fact, that the stock /etc/php5/cli/php.ini contains memory_limit=-1 is causing sohosin to generate many log messages.
(See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566609 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582384) We would need to confirm that ulimit is truly the new functioning memory-limiting mechanism and have php5-suhosin be modified to reflect that. -- François Beaulieu, CISSP Conseiller principal / Senior Consultant Secure by Knowledge +1 (514) 667-0691 ext 2061 [email protected]<mailto:[email protected]>
