desktop-packages team mailing list archive

[Axel Beckert <abe@xxxxxxxxxx>]

Hi,

dino99 wrote:
> but there are only two users afected since 2012;

Probably because it occurs rather seldom, but if it does, it can cause
quite some issues.

> none reported against newer version than 'precise',

Indeed. We only ran into it once. At least there was only once such
incident at our department I'm aware of.

> meaning that problem is not met and so 'fixed' as it is not a
> 'security' problem,

It's not a security problem on the machine, but it caused an security
incident here, because an e-journal provider filed an abuse complaint
at our department and I had to take the affected machine offline until
it was clear that this is "just" a bug and not a malicious (read
"DoS") attack.

So this bug can definitely cause effects that look like a DoS attack
to others.

> swith to 'incomplete' .

"Incomplete" is ok-ish IMHO. Nevertheless, I'd prefer to keep that bug
open at least until precise is gone, too.

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe@xxxxxxxxxx>, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-    |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gvfs in Ubuntu.
https://bugs.launchpad.net/bugs/1020244

Title:
  gvfsd-http loops requesting the same page

Status in gvfs package in Ubuntu:
  Incomplete

Bug description:
  Seen on a lucid system:

  # pgrep -fl gvfs
  2086 /usr/lib/gvfs/gvfsd
  2093 /usr/lib/gvfs//gvfs-fuse-daemon /home/CENSORED/.gvfs
  2116 /usr/lib/gvfs/gvfs-gdu-volume-monitor
  2122 /usr/lib/gvfs/gvfsd-trash --spawner :1.7 /org/gtk/gvfs/exec_spaw/0
  2124 /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
  2126 /usr/lib/gvfs/gvfs-afc-volume-monitor
  2159 /usr/lib/gvfs/gvfsd-metadata
  2175 /usr/lib/gvfs/gvfsd-burn --spawner :1.7 /org/gtk/gvfs/exec_spaw/1
  2500 /usr/lib/gvfs/gvfsd-http --spawner :1.7 /org/gtk/gvfs/exec_spaw/2
  5282 /usr/lib/gvfs/gvfsd-computer --spawner :1.7 /org/gtk/gvfs/exec_spaw/3
  20563 gdb /usr/lib/gvfs/gvfsd-http 2500

  Until I attached gvfsd-http with the debugger, it was bombarding a web
  server with HTTP HEAD requests for the same URL at about 6 seconds'
  interval. (The web server responded in less than a second.) The
  requests were all using the same TCP connection, except when the
  server returned 503 Service Unavailable; then a new TCP connection was
  established and used.

  Here is the backtrace from gdb:

  0x00007f529f794543 in *__GI___poll (fds=<value optimized out>, 
      nfds=<value optimized out>, timeout=-1)
      at ../sysdeps/unix/sysv/linux/poll.c:87
  87	../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
  	in ../sysdeps/unix/sysv/linux/poll.c
  (gdb) bt
  #0  0x00007f529f794543 in *__GI___poll (fds=<value optimized out>, 
      nfds=<value optimized out>, timeout=-1)
      at ../sysdeps/unix/sysv/linux/poll.c:87
  #1  0x00007f529fa7f4a9 in ?? () from /lib/libglib-2.0.so.0
  #2  0x00007f529fa7fc55 in g_main_loop_run () from /lib/libglib-2.0.so.0
  #3  0x000000000040cbce in ?? ()
  #4  0x000000000040ce5f in ?? ()
  #5  0x00007f529f6d8c4d in __libc_start_main (main=<value optimized out>, 
      argc=<value optimized out>, ubp_av=<value optimized out>, 
      init=<value optimized out>, fini=<value optimized out>, 
      rtld_fini=<value optimized out>, stack_end=0x7ffff2d4e2a8)
      at libc-start.c:226
  #6  0x0000000000409299 in ?? ()
  #7  0x00007ffff2d4e2a8 in ?? ()
  #8  0x000000000000001c in ?? ()
  #9  0x0000000000000004 in ?? ()
  #10 0x00007ffff2d4ea83 in ?? ()
  #11 0x00007ffff2d4ea9c in ?? ()
  #12 0x00007ffff2d4eaa6 in ?? ()
  #13 0x00007ffff2d4eaab in ?? ()
  #14 0x0000000000000000 in ?? ()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1020244/+subscriptions