oss-security - Re: Re: Varnish - no CVE == bug regression

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CACYkhxgfcOr=sXxUmsT8VctvHHqN-tJnxa4cKrV9nS0OrccZ0A@mail.gmail.com>
Date: Wed, 9 Jul 2014 10:41:35 +1000
From: Michael Samuel <mik@...net.net>
To: oss-security@...ts.openwall.com
Cc: phk@....freebsd.dk
Subject: Re: Re: Varnish - no CVE == bug regression

So just to clarify:

On 9 July 2014 05:55, Poul-Henning Kamp <phk@....freebsd.dk> wrote:
>         param.show auto_restart
>         200 132
>         auto_restart
>                 Value is: on [bool] (default)
>                 Default is: on
>
>                 Restart child process automatically if it dies.

Does this mean that the parent holds the accept() socket open, so if a worker
dies (eg. due to the client injecting a header into it's own
connection) only that
connection is affected?

Regards,
  Michael

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.