Comment by DonHopkins
9 hours ago
Time to restart Apache again!
"I'm not a real programmer. I throw together things until it works then I move on. The real programmers will say 'Yeah it works but you're leaking memory everywhere. Perhaps we should fix that.' I’ll just restart Apache every 10 requests." -Rasmus Lerdorf
Amusingly enough restarting php after each request seems to block the issue
If true then classic CGI mode should not be vulnerable, but apparently it is.
Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it?
2 replies →