On Saturday 19 June 2010 21:31:13 Ximin Luo wrote:
> sorry for the delay - could you try using
> 
> http://downloads.freenetproject.org/alpha/freenet-ext.27pre7.jar
> 
> which has a newer version of the native FEC codec and see if it still 
> segfaults
> for you?

As I understand it, we never fixed this? Given the magnitude of the security 
issue we need to either review the code *thoroughly* or give up and not use 
native FEC. IMHO the latter may be best for now.
> 
> Ximin
> 
> On 14/06/10 12:35, Yuriy Kaminskiy wrote:
> > I've noticed spam attack on frost reappeared, and out of curiosity looked at
> > some keys. To my horror examining one of keys in KeyUtils caused node 
> > restart,
> > with rather scary message in wrapper.log:
> > INFO   | jvm 4    | 2010/06/12 20:13:32 | Announcement to 94.23.20.44:55705
> > completed.
> >> INFO   | jvm 4    | 2010/06/13 17:01:19 | *** glibc detected *** free():
> > invalid next size (fast): 0x081399b8 ***
> > STATUS | wrapper  | 2010/06/13 17:01:25 | JVM received a signal UNKNOWN (6).
> > STATUS | wrapper  | 2010/06/13 17:01:25 | JVM process is gone.
> > ERROR  | wrapper  | 2010/06/13 17:01:25 | JVM exited unexpectedly.
> > STATUS | wrapper  | 2010/06/13 17:01:29 | Reloading Wrapper configuration...
> > STATUS | wrapper  | 2010/06/13 17:01:31 | Launching a JVM...
> > INFO   | jvm 5    | 2010/06/13 17:01:32 | WrapperManager: Initializing...
> > Reproducible. Downloading this key:
> > curl
> > 'http://127.0.0.1:8888/KSK at 
> > frost|message|news|2010.6.13-freenet-38.xml?type=text/plain'
> > also causes node restart with same error.
> > Unfortunately, I found nothing useful in node logs (suppose, they are not
> > flushed?) :-\
> > This is on build1250, i386, linux, sun java 1.6.0_20
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20101016/d8326284/attachment.pgp>

Reply via email to