Bug#777349: intermittent "size read failed" (clients can lose response data from server)

Kees Cook kees at debian.org
Sat Feb 7 15:58:00 UTC 2015


Package: cyrus-sasl2
Version: 2.1.26.dfsg1-12
Severity: normal
Tags: patch

Under certain conditions (server load? memory pressure?) it was possible
for responses from saslauthd to get lost. The client library sends data
and waits for a response. The server sends a response and immediately
closes the connection without waiting for the connection to flush. The
pending response can get lost (kernel throws it away), leaving the
client to error out with "size read failed". The solution is for the
server to more carefully shut down the socket and wait for the client
to close the connection.

-Kees

-- 
Kees Cook                                            @debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: early-hangup.patch
Type: text/x-diff
Size: 830 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20150207/0690f129/attachment.patch>


More information about the Pkg-cyrus-sasl2-debian-devel mailing list