[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [TSVN] interaction between show log dialog and svnserve

From: Simon Large <slarge_at_slarge.plus.com>
Date: 2005-05-15 22:28:13 CEST

stephen meechan wrote:
>>> I've download TortoiseSVN build 3350 and SVN 1.2-rc4 to try out the
>>> new features that have been added.
>>> However I use svnserve and noticed that when using the log dialog,
>>> every press of either "Show All" or "Next 100" leads to a new
>>> thread created within svnserve along with 6 handles and some memory.
>>>
>>> There seems to be no limit on this, you can increase it to hundreds
>>> of threads if you press the buttons often enough.
>>>
>>> All the threads are released once you exit the dialog though.

This sounds potentially serious if it provides a way of launching a DoS
attack on svnserve, which means it is something the SVN devs should know
about I think.

Simon

-- 
       ___
  oo  // \\      "De Chelonian Mobile"
 (_,\/ \_/ \     TortoiseSVN
   \ \_/_\_/>    The coolest Interface to (Sub)Version Control
   /_/   \_\     http://tortoisesvn.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Sun May 15 22:27:21 2005

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.