Security issue exposed revolving around DOS attack to crash the hashtable storing variables. Read more:

Patch released to Apache to prevent this by restricting number of variables allowed (Red Hat 5.3.3-1.el5-7.5?).

However, if you have a giant website, trying to administer the menu (with the numerous checkboxes and hidden order fields) results in WSOD (segmentation fault on zend_hash_num_elements). e.g. 1000+ pages.

Two suggestions/requests (should this be a feature request?) --

  1. if this new setting is configurable via ini_set, would it be possible to increase the limit only on menu pages?
  2. some kind of paginated menu administration, so we still have access to the enable/disable checkboxes in bulk

I know this may be an edge case, so if I can do this on my Drupal instance instead please let me know.

Comments

dzaus’s picture

Issue summary: View changes

more reading - links

dzaus’s picture

Issue summary: View changes

one more reference

Version: 7.8 » 7.x-dev

Core issues are now filed against the dev versions where changes will be made. Document the specific release you are using in your issue comment. More information about choosing a version.