On Sat, Mar 22, 2003 at 12:12:12PM +0100, Ludger Merkens wrote:
You can't "catch" a segfault
i meant catching it before it is executed. erm, we need to catch exit() too.
For this reason a malicious program in an endlessloop is the bigger risk to a system like sTeam. Thats our main reason, why we put such a feature on the wish list on the last pike conference. ("A save way to remove one thread from outside the thread itselve"), this would allow to do some housekeeping on userthreads and remove them e.g. after some time limit.
erm, right now, such an endless loop blocks the whole server. i don't see how housekeeping would solve that problem.
it seems our next sTeam project group needs to be about pike security, we have major problems in this area.
greetings, martin.