Your message dated Sat, 21 Aug 2010 22:51:39 +0200
with message-id <20100821205139.ga10...@phenomenon>
and subject line Re: Bug#508821: mozilla-plugin-gnash: litters the process 
space with zombie processes, please waitpid them
has caused the Debian Bug report #508821,
regarding mozilla-plugin-gnash: litters the process space with zombie 
processes, please waitpid them
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
508821: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508821
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mozilla-plugin-gnash
Version: 0.8.4-2
Severity: important

The gnash plugin seems to not waitpid for children and that way litters
the process space. For instance liferea has 24 dead gtk-gnash children
on my system.

It looks likely to be easy to create these zombies using specially
crafted websites. So only by viewing a web page it should be possible to
consume the process space and that way cause a denial of service.

It should be possible to frequently invoke waitpid using WNOHANG.

Helmut

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.23.14 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages mozilla-plugin-gnash depends on:
ii  gnash                         0.8.4-2    free SWF movie player
ii  libc6                         2.7-16     GNU C Library: Shared libraries
ii  libgcc1                       1:4.3.2-1  GCC support library
ii  libglib2.0-0                  2.16.6-1   The GLib library of C routines
ii  libldap-2.4-2                 2.4.11-1   OpenLDAP libraries
ii  libstdc++6                    4.3.2-1    The GNU Standard C++ Library v3
ii  libx11-6                      2:1.1.5-2  X11 client-side library
ii  libxi6                        2:1.1.4-1  X11 Input extension library

mozilla-plugin-gnash recommends no packages.

mozilla-plugin-gnash suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---


--- End Message ---

Reply via email to