Your message dated Sun, 08 Jun 2014 19:33:53 +0000
with message-id <[email protected]>
and subject line Bug#610199: fixed in polipo 1.1.1-1
has caused the Debian Bug report #610199,
regarding polipo: may download same object in endless loop
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
610199: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610199
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: polipo
Version: 1.0.4.1-1.1
Hi,
I just experienced some very nasty behaviour from polipo.
It seems a client was viewing
http://www.theaa.com/route-planner/index.jsp which makes some use of
Google Maps. Somehow polipo ended up trying to download two map tiles
from Google's maptile server over, and over again.
I only noticed this 7 hours later, with about 9 GiB of data downloaded.
And this was at least 2 hours after the client's machine had been
powered down.
polipo.log contains the following messages repeating in random order:
> Couldn't get peer name: Transport endpoint is not connected
> Refusing connection from unauthorised net
> Aborting pipeline on mw1.google.com:80.
> Server ignored conditional request.
> Server ignored conditional request.
> Server ignored conditional request.
> Server ignored conditional request.
> Restarting pipeline to cbk0.google.com:80.
> Server ignored conditional request.
> Server ignored conditional request.
> Server ignored conditional request.
> Restarting pipeline to mw1.google.com:80.
> Server ignored conditional request.
> Server ignored conditional request.
> Server ignored conditional request.
> Server ignored conditional request.
I managed to record a short packet capture with tcpdump before I killed
polipo. The HTTP queries generated by polipo looked like this -- they
don't look like conditional requests though:
> GET /vt/lyrs=m@142&hl=en&src=api&x=1018&y=660&z=11&s=Ga HTTP/1.1
> Host: mt0.google.com
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2.13)
> Gecko/20101203 Firefox/3.6.13 (.NET CLR 3.5.30729)
> Accept: image/png,image/*;q=0.8,*/*;q=0.5
> Accept-Language: en-gb,en;q=0.5
> Accept-Encoding: gzip,deflate
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Referer: http://www.theaa.com/route-planner/index.jsp
> Cookie: [omitted]
> Connection: keep-alive
The responses from Google's map tileserver were like this, followed by a
stream of PNG data (within the same packet):
> HTTP/1.1 200 OK
> Date: Sat, 15 Jan 2011 08:24:58 GMT
> Content-Type: image/png
> X-Content-Type-Options: nosniff
> Server: maptiles-versatile
> Content-Length: 9722
> X-XSS-Protection: 1; mode=block
> Cache-Control: public, max-age=22222222
Polipo responded to these packets by immediately closing the connection
(TCP packets with FIN or RST flag). This kept happening until I killed
polipo with killall ('/etc/init.d/polipo stop' wasn't enough).
Then I saw in netstat that the proxy server's connections from the
client host were in the CLOSE_WAIT state with 0 bytes in Recv/Send-Q,
but that machine had been offline for at least 2 hours by that time.
That's all I've been able to figure out so far. I'll certainly keep an
eye out in case this happens again.
Regards,
--
Steven Chamberlain
[email protected]
--- End Message ---
--- Begin Message ---
Source: polipo
Source-Version: 1.1.1-1
We believe that the bug you reported is fixed in the latest version of
polipo, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Rolf Leggewie <[email protected]> (supplier of updated polipo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 06 Jun 2014 15:29:19 +0200
Source: polipo
Binary: polipo
Architecture: source i386
Version: 1.1.1-1
Distribution: unstable
Urgency: medium
Maintainer: Rolf Leggewie <[email protected]>
Changed-By: Rolf Leggewie <[email protected]>
Description:
polipo - lightweight, caching web proxy
Closes: 307801 432561 517479 585766 610199 646709 655851 684742 746750
Changes:
polipo (1.1.1-1) unstable; urgency=medium
.
* release newest upstream version 1.1.1. Closes: #746750
- use regerror to improve error reporting. Closes: #585766
- correct return value from processObject in error case. LP: #988780
- resume interrupted file download properly. Closes: #517479
- vastly improve stability. LP: #1055418, LP: #988780, LP: #1168593
Closes: #684742, Closes: #307801, Closes: #432561, Closes: #646709
- handle non-existent host properly. Closes: #655851
- Don't revalidate objects >= CHUNK_SIZE that aren't in the disk cache.
Closes: #610199
* drop patches included upstream and rebase the rest
* update watch file
Checksums-Sha1:
190276f31a2ed4526657c1b26117432ca5ec1917 1875 polipo_1.1.1-1.dsc
cf7461a96c4bf012496844d5a54171182c2cb1a7 182891 polipo_1.1.1.orig.tar.gz
a2f4a5748f61333e96c3f1f0d9cb0ef39462ddc7 11744 polipo_1.1.1-1.debian.tar.xz
3c21de6d394ed05e420a86fe126f816d48878109 179890 polipo_1.1.1-1_i386.deb
Checksums-Sha256:
ae9a90eafbe5d0e2c02ec9f09fc126f7a21db8a7949f787ec6b9813a01533bc2 1875
polipo_1.1.1-1.dsc
a259750793ab79c491d05fcee5a917faf7d9030fb5d15e05b3704e9c9e4ee015 182891
polipo_1.1.1.orig.tar.gz
9899c5a7157a3cb2fcbcae03cbc6f3812733c5cdf2beca59584784998bab97a3 11744
polipo_1.1.1-1.debian.tar.xz
611247400595b59efe2772bd5b3f53a3516fac735f0804ddd77d17244a081b18 179890
polipo_1.1.1-1_i386.deb
Files:
fd9ffdb2498b0cd0234f3df26538fc9f 179890 web optional polipo_1.1.1-1_i386.deb
988d48eb7b00432e2650aabd7cfc0e7a 1875 web optional polipo_1.1.1-1.dsc
86939e331e656f638271f578b6e3f893 182891 web optional polipo_1.1.1.orig.tar.gz
b014f148b29e6540740bd34dacf6e08b 11744 web optional
polipo_1.1.1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBAgAGBQJTlLlcAAoJEJSEK8huURwxC+IQAJ08I2ANsFD60PxJY1wAyM88
yP2e9Q7T0df89Vog/FYX3IktJi2yPAi6VQJP4r7w8m+jY6lxRAPTfQ0hjTRJMMxn
vdY5kZcQY1HNBp0d/hdhEYMFpiqKXHiOq0tUcTevqgJI8EasKSP4jMHhXOOWoZbw
Ae8LdCi7lyWSUO4cdl1M2TxHB064vn+prnvq0dAtQShGNXm7iA8pTFoUbaqvY6uU
ujfeihOv5D+BipZ3wwElgX+7FEqMx7CTEi3G4+m/KcjAhPXTMg3mDen4I1C6LpR5
hHEcATZdpaowUaSGfRF93ShwkTwfKo2uSVYgFXA2NpNeLc63jX3Jf+4rBtjolWjA
w5ZQq4NlM3irX//B89KCmIpwW3cLVha0ympiGJFcdOZJ2R5ZIjDE6NXEYM6Wng6X
XlswOCVFGSDK+Zeit54OSer1QhntAYWNRn5/e4tUeAh59yG8Vrubqac6GbqXRig3
lK9tMHKqBvlUky4/hclIvisHhQH1dmrTsBbHAehKSgadUqNgQPOEWS78iZpb0TK3
WB7UrEn7pvqUGhHdj4IPxYOmrvdIsfVzEjlunrZKUryXrKuI1hQAK9VrAuwsophO
WzK/3rsb6BJt98v6P/L4d311eRvWni8gGSngusESqS1tL350HikSk6sHyjpdNB13
91SUObaG1kLdGTAmli03
=lBKm
-----END PGP SIGNATURE-----
--- End Message ---
