Comment 2 for bug 937554

Revision history for this message
Thierry Carrez (ttx) wrote :

This looks a lot like bug 893582, which was supposedly fixed in E3. Justin, what version do you reproduce on ?

I'd consider this a vulnerability if it's quite easy to DoS the whole thing. Requiring an authenticated user is not really a high bar of entry :) We have a bunch of those action concurrency issues (tagged "concurrency" for those playing at home), but most (all?) of them were just triggering bugs, not crashes...