Project

General

Profile

Actions
Copy link

Bug #3540

closed
BN KD

plain HTML sessions limit bug

Bug #3540: plain HTML sessions limit bug

Added by Boris Nagaev about 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Koen Deforche
Target version:
3.3.4
Start date:
08/22/2014
Due date:
% Done:

0%

Estimated time:

Description

src/web/WebController.C:
return plainHtmlSessions_ > conf*.maxPlainSessionsRatio() * ajaxSessions*;
should be
return plainHtmlSessions_ > conf*.maxPlainSessionsRatio() * (ajaxSessions* + plainHtmlSessions_);

Currently, even if plain-ajax-sessions-ratio-limit=1, running 20 Ajax + 20 HTML sessions, new HTML sessions are discarded as DDoS.

KD Updated by Koen Deforche almost 12 years ago Actions
Copy link
 #1

  • Status changed from New to Resolved
  • Assignee set to Koen Deforche
  • Target version set to 3.3.4

KD Updated by Koen Deforche almost 12 years ago Actions
Copy link
 #2

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom