full-disclosure - Re: [DoS] Firefox 3 beta 5 on Ubuntu 7.10 (hangs the OS)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 22 Apr 2008 08:29:17 +0200
From: Tonnerre Lombard <tonnerre.lombard@...roup.ch>
To: K-Gen <alphakgen@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [DoS] Firefox 3 beta 5 on Ubuntu 7.10 (hangs
 the OS)

Salut, K-Gen,

On Mon, 21 Apr 2008 21:32:27 +0300, K-Gen wrote:
> "I'll be honest, I was very surprised by this find. As a matter of
> fact, this was the first time I ever managed to crash Linux
> completely... Through a web browser.

You should consider using rlimits, which tend to contain this problem
decently well. But yes, the Linux scheduler is utter crap when it comes
to handling OOM conditions and thrashing.

Actually, I find it somewhat stupid of the end user distributions to
ship with most rlimits set to unlimited. I mean, it keeps the most
stupid software from crashing, but with a scheduler as bad as this, I
wouldn't dare letting the users run without rlimits.

				Tonnerre
-- 
SyGroup GmbH
Tonnerre Lombard

Solutions Systematiques
Tel:+41 61 333 80 33		Güterstrasse 86
Fax:+41 61 383 14 67		4053 Basel
Web:www.sygroup.ch		tonnerre.lombard@...roup.ch

Download attachment "signature.asc" of type "application/pgp-signature" (825 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/