Hi,
dino99 wrote:
> but there are only two users afected since 2012;
Probably because it occurs rather seldom, but if it does, it can cause
quite some issues.
> none reported against newer version than 'precise',
Indeed. We only ran into it once. At least there was only once such
incident at our department I'm aware of.
> meaning that problem is not met and so 'fixed' as it is not a
> 'security' problem,
It's not a security problem on the machine, but it caused an security
incident here, because an e-journal provider filed an abuse complaint
at our department and I had to take the affected machine offline until
it was clear that this is "just" a bug and not a malicious (read
"DoS") attack.
So this bug can definitely cause effects that look like a DoS attack
to others.
> swith to 'incomplete' .
"Incomplete" is ok-ish IMHO. Nevertheless, I'd prefer to keep that bug
open at least until precise is gone, too.
Regards, Axel
--
,''`. | Axel Beckert <a...@debian.org>, http://people.debian.org/~abe/
: :' : | Debian Developer, ftp.ch.debian.org Admin
`. `' | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5
`- | 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gvfs in Ubuntu.
https://bugs.launchpad.net/bugs/1020244
Title:
gvfsd-http loops requesting the same page
Status in gvfs package in Ubuntu:
Incomplete
Bug description:
Seen on a lucid system:
# pgrep -fl gvfs
2086 /usr/lib/gvfs/gvfsd
2093 /usr/lib/gvfs//gvfs-fuse-daemon /home/CENSORED/.gvfs
2116 /usr/lib/gvfs/gvfs-gdu-volume-monitor
2122 /usr/lib/gvfs/gvfsd-trash --spawner :1.7 /org/gtk/gvfs/exec_spaw/0
2124 /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
2126 /usr/lib/gvfs/gvfs-afc-volume-monitor
2159 /usr/lib/gvfs/gvfsd-metadata
2175 /usr/lib/gvfs/gvfsd-burn --spawner :1.7 /org/gtk/gvfs/exec_spaw/1
2500 /usr/lib/gvfs/gvfsd-http --spawner :1.7 /org/gtk/gvfs/exec_spaw/2
5282 /usr/lib/gvfs/gvfsd-computer --spawner :1.7 /org/gtk/gvfs/exec_spaw/3
20563 gdb /usr/lib/gvfs/gvfsd-http 2500
Until I attached gvfsd-http with the debugger, it was bombarding a web
server with HTTP HEAD requests for the same URL at about 6 seconds'
interval. (The web server responded in less than a second.) The
requests were all using the same TCP connection, except when the
server returned 503 Service Unavailable; then a new TCP connection was
established and used.
Here is the backtrace from gdb:
0x00007f529f794543 in *__GI___poll (fds=<value optimized out>,
nfds=<value optimized out>, timeout=-1)
at ../sysdeps/unix/sysv/linux/poll.c:87
87 ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
in ../sysdeps/unix/sysv/linux/poll.c
(gdb) bt
#0 0x00007f529f794543 in *__GI___poll (fds=<value optimized out>,
nfds=<value optimized out>, timeout=-1)
at ../sysdeps/unix/sysv/linux/poll.c:87
#1 0x00007f529fa7f4a9 in ?? () from /lib/libglib-2.0.so.0
#2 0x00007f529fa7fc55 in g_main_loop_run () from /lib/libglib-2.0.so.0
#3 0x000000000040cbce in ?? ()
#4 0x000000000040ce5f in ?? ()
#5 0x00007f529f6d8c4d in __libc_start_main (main=<value optimized out>,
argc=<value optimized out>, ubp_av=<value optimized out>,
init=<value optimized out>, fini=<value optimized out>,
rtld_fini=<value optimized out>, stack_end=0x7ffff2d4e2a8)
at libc-start.c:226
#6 0x0000000000409299 in ?? ()
#7 0x00007ffff2d4e2a8 in ?? ()
#8 0x000000000000001c in ?? ()
#9 0x0000000000000004 in ?? ()
#10 0x00007ffff2d4ea83 in ?? ()
#11 0x00007ffff2d4ea9c in ?? ()
#12 0x00007ffff2d4eaa6 in ?? ()
#13 0x00007ffff2d4eaab in ?? ()
#14 0x0000000000000000 in ?? ()
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1020244/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
