Hi,
Someone in our QA team tried the following test:
telnet 80
GET https://whatever.html HTTP/1.0
this resulted in a segfault for the child that handled the request.
Agreed, this is not a normal HTTP request, but firing enough of them
will surely DoS the server.
Our apache run
Thanks Kris.
Keep them coming ;-)
Kris Verbeeck wrote:
> Hi,
>
> Someone in our QA team tried the following test:
>
> telnet 80
> GET https://whatever.html HTTP/1.0
>
> this resulted in a segfault for the child that handled the request.
> Agreed, this is not a normal HTTP request
Apache behaviour with this patch (or without mod_cache):
The request:
GET https://whatever.html HTTP/1.0
is equivalent to:
GET / HTTP/1.0
I'm wondering whether this is the desired behaviour? This is
also the behaviour of a 1.3.x Apache. Maybe Apache should block
this kind of
Kris Verbeeck wrote:
> Apache behaviour with this patch (or without mod_cache):
>
> The request:
>
> GET https://whatever.html HTTP/1.0
>
> is equivalent to:
>
> GET / HTTP/1.0
>
> I'm wondering whether this is the desired behaviour? This is
> also the behaviour of a 1.3.x Apach