Comment 4 for bug 1155566

Revision history for this message
Kurt Seifried (kseifried) wrote :

Can you say roughly how how big the POST requests are (and how many are needed) to cause memory consumption of say 1 gig? 4 gigs? I'm wondering if this needs a CVE or if it's a case of" way to much stuff makes system slow. block insane POST upload sizes". Is it linear (e.g. a 1 meg post takes one second to process, a 600 megabyte post takes 10 minutes? or is it quadratic, exponential roughly, or? (e.g. a 100 meg request takes 100 minutes? 100 hours?). Thanks, I'm just trying to figure out if this needs a CVE or not, and if it can be blocked by enforcing a maximum post size.