3 ms·
Does traffic from different sites flow through the same server process on CF? E.g., can the following sequence occur?: 1. a request hits a site that doesn't us
by deathanatos 10y ago
Does traffic from different sites flow through the same server process on CF? E.g., can the following sequence occur?:
1. a request hits a site that doesn't use any of those features, but loads juicy data into memory temporarily; the memory is dealloc'd, but is now "primed"
2. a request hits a site that uses those features, triggers the bug, and leaks the data from step #1.
Said differently, my reading of the CF blog is that only sites using those three page rules trigger the bug, but that is distinct from being affected by it. (The affected site is the one in the uninitialized memory; the site using the rules is in the initialized memory being processed.)
- toyg 10y agoYour sequence is correct. The bug was triggered at the proxy level, in an nginx module.