Hi Pierce, On 13 May 2013, at 14:35, Pierce Ng <pierce@samadhiweb.com> wrote:
Hi,
(Second try. Seems my first attempt went out at just around the time the previous list died.)
I'm writing (what should become) a series of blog posts on fuzzing. My blog runs as a Zinc server delegate on Pharo. From source code, I see ZnMaximumEntitySize, ZnServer>>maximumEntitySize:, ZnConstants class>>defaultMaximumEntitySize, etc.
Seems the setting doesn't? The following is my server:
| s | s := ZnSingleThreadedServer on: 8082. s maximumEntitySize: 128. s delegate: (ZnValueDelegate with: [ :req | ZnResponse ok: (ZnEntity html: ZnConstants welcomePageHtml) ]). s logToTranscript. s start.
I expected the following client to raise ZnEntityTooLarge, but it doesn't. Instead it works, and I see in the Transcript the request with all the $a in it. Am I reading the source wrong?
ZnEasy get: ('http://127.0.0.1:8082/', (String new: 200 withAll: $a) asString)
ZnEntityTooLarge is a condition that is signaled by the server when it is receiving (reading) an incoming entity that is too large. This is done to protect the server. This condition is only applicable to ZnEntity and subclasses. A ZnRequest consists of other parts as well (request line and headers). For these other conditions apply: ZnLineTooLong and ZnTooManyDictionaryEntries. In the above example, you could try to add 4096 $a's to trigger a ZnLineTooLong. To trigger ZnEntityTooLarge you should PUT or POST data.
Incidentally, when I did the following on another machine, both client and server threw time-out exceptions:
ZnEasy get: ('http://192.168.x.x:8082/', (String new: (16 * 1024 * 1024) withAll: $a) asString)
Yes, the reaction of the server to these condition is rather hard: I should check, but I think it just aborts. I will see if I can write some high level tests. Regards, Sven
-- Pierce Ng http://samadhiweb.com/blog/
_______________________________________________ Pharo-users mailing list Pharo-users@lists.pharo.org http://lists.pharo.org/mailman/listinfo/pharo-users_lists.pharo.org
-- Sven Van Caekenberghe Proudly supporting Pharo http://pharo.org http://association.pharo.org http://consortium.pharo.org