Mailing List Archive: Apache: Bugs

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed

Index | Next | Previous | View Threaded

bugzilla at apache

May 2, 2008, 10:06 PM

Post #1 of 6 (114 views)
Permalink

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed

https://issues.apache.org/bugzilla/show_bug.cgi?id=44782

--- Comment #1 from Tony <j_and_t[at]hotmail.com> 2008-05-02 22:06:57 PST ---
Is there a point in posting? Doesn't seem anything, not even a comment about
this. Is it not worthy?

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: bugs-help[at]httpd.apache.org

bugzilla at apache

May 4, 2008, 11:42 AM

Post #2 of 6 (96 views)
Permalink

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=44782

--- Comment #2 from Vinci <vinci.cat[at]gmail.com> 2008-05-04 11:42:46 PST ---
I encounter same bug with mod_perl 2.0.2 (perl 5.8.8), on apache 2 running at
worker mode (apache2-mpm-worker) 2.2.4 on Ubuntu 7.10. Everything come from
apt-get.

Fortunately, if you using GET at all the time you won't notice by this bug

The solution works but this is not graceful if I need to do that on all
cgi-script that receive POST request.

Actually this bug will causing unexpected 500 error when running with
mod_security.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: bugs-help[at]httpd.apache.org

bugzilla at apache

May 8, 2008, 12:48 AM

Post #3 of 6 (78 views)
Permalink

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=44782

--- Comment #3 from Tony <j_and_t[at]hotmail.com> 2008-05-08 00:48:48 PST ---
Yes this is a big bug and I don't know why no one from Apache has even
commented on this post. My temporary solution so far is to add this line to
programs before exit:

if ($ENV{'CONTENT_LENGTH'}) {while (<STDIN>){}}

Vinci, you state it is not a problem with GET, but the problem is mainly if you
use "GET" in your application and do not write for a POST. Some bots out there
may try using your GET method forms/links, but instead may send a POST and
that's where the problem is. Plus bots or any malicious user could try sending
HUGE amounts of data via a POST bringing your server down as Apache waits for
the POST data to be read. My solution to prevent this has been to limit how
much of the $ENV{'CONTENT_LENGTH'} I would read in, but with this bug it just
hangs your server until the client has finished sending their POST. The only
solution I've been able to come up with is the one above, but it is band-aide
rather than a fix. I sure wish someone from Apache would at least comment on
this.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: bugs-help[at]httpd.apache.org

bugzilla at apache

May 8, 2008, 4:19 AM

Post #4 of 6 (76 views)
Permalink

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=44782

Ruediger Pluem <rpluem[at]apache.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution| |INVALID

--- Comment #4 from Ruediger Pluem <rpluem[at]apache.org> 2008-05-08 04:19:26 PST ---
This works as designed. It is the task of the cgi script to swallow the whole
request body prior to sending a response, whether it uses it for some purpose
or not.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: bugs-help[at]httpd.apache.org

bugzilla at apache

May 13, 2008, 8:45 AM

Post #5 of 6 (44 views)
Permalink

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=44782

--- Comment #5 from Tony <j_and_t[at]hotmail.com> 2008-05-13 08:45:43 PST ---
Of course this "as designed" is not good. You are asking everyone to modify
everything they've done in past years to accept and "gobble up" all incoming
"request body" (post, get, head and ?) content even though their programs may
not be parsing incoming data.

Some programs are designed to do nothing more but fetch a static document or
print an image or ? and be triggered by nothing more than the execution of
their script. Many programs may do nothing more than generate a cookie. But you
are now asking us to create Microsoft bloatware to handing incoming data by
either including our own routines to gobble things up (any kind of request) or
include libraries (id, like Perl use CGI) in our code to create bloatware so
that Apache terminates the "bad" connection! NOT GOOD!

Personally I do not agree with this as designed. This is obviously a change
that either I missed or was not documented in the changes. As far as I know
this was never a problem in past versions of Apache.

With the growing number of worms and viruses, developers would rather NOT
"gobble up" incoming data if our program is not going to use it. Nor do we want
to include libraries or write code to gobble every possible type of incoming
data. Apache should accept our "exit" code from our program and terminate the
connection between client and server regardless of the reason for our "exit"
code. By keeping connections between client and server open after our exit you
are asking for trouble. The more worms hitting the server that you keep active
the more vunerable our Apache server is. You are asking us to re-develop
everything we've done to handle all or any type of incoming data. For me I feel
this is a burden you are asking us to take on.

Just my opinion of this which I'm sure others share.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: bugs-help[at]httpd.apache.org

bugzilla at apache

May 13, 2008, 12:00 PM

Post #6 of 6 (43 views)
Permalink

[Bug 44782] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=44782

--- Comment #6 from Ruediger Pluem <rpluem[at]apache.org> 2008-05-13 12:00:48 PST ---
Sorry but this behaviour is there for ages (at least since 2.0.x) and it does
not put a large burden on the cgi script developer. Simply read all the data
from standard input and throw it away immediately without any further handling
or just close the stdin file handle in your cgi script and you are done. If you
close the stdin filehandle in your cgi script httpd will take the task and the
burden to swallow all incoming data and discard it.
If you don't like doing this configure you cgi scripts via <limit> to only
accept GET requests.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe[at]httpd.apache.org
For additional commands, e-mail: bugs-help[at]httpd.apache.org

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com