4 ms·
> The 2nd process only detects that the 1st process has crashed, then removes the offending datum from the queue. Thereby hiding away the problem, diminishing
by yholio 8y ago
> The 2nd process only detects that the 1st process has crashed, then removes the offending datum from the queue.
Thereby hiding away the problem, diminishing the urgency of a fix while strongly favouring it's exploitation. Something that's just a DOS in an ASLR environment escalates to a remotely exploitable hole where the atacker can iterate untill they get the correct offset.
Unless a process is expected to crash or terminate by design, automatic respawning is not a good security practice.