NetBSD Problem Report #60867

From www@netbsd.org  Sun Oct 11 08:22:59 2026
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits)
	 client-signature RSA-PSS (2048 bits))
	(Client CN "mail.netbsd.org", Issuer "YR1" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 8439B1A923B
	for <gnats-bugs@gnats.NetBSD.org>; Sun, 11 Oct 2026 08:22:59 +0000 (UTC)
Message-Id: <20261011082258.5803E1A923C@mollari.NetBSD.org>
Date: Sun, 11 Oct 2026 08:22:58 +0000 (UTC)
From: rnkn@rnkn.xyz
Reply-To: rnkn@rnkn.xyz
To: gnats-bugs@NetBSD.org
Subject: allow disabling inetd(8) instance spawn limit
X-Send-Pr-Version: www-1.0
X-From4GNATS: "rnkn@rnkn.xyz via gnats" <gnats-admin@NetBSD.org>

>Number:         60867
>Category:       bin
>Synopsis:       allow disabling inetd(8) instance spawn limit
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Oct 11 08:25:00 +0000 2026
>Last-Modified:  Sun Oct 11 15:27:05 +0000 2026
>Originator:     Paul Rankin
>Release:        11.0
>Organization:
>Environment:
NetBSD avalon.blip.town 11.0 NetBSD 11.0 (GENERIC) #0: Thu Jul 30 15:23:12 UTC 2026  mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64
>Description:
Currently inetd(8) shuts down connections for 10 minutes if it spawns more than 40 instances of a service within 60 seconds. This can be adjusted with nowait:max. I'm currently settings max to 1000000 to effectively disable this feature, since I do not want a 10 minutes shutdown under any circumstances. This is a hack and I think it would be cleaner to accept an argument of 0 to set no max.

Currently setting 0 is a literal zero, meaning the service would die for 10 minutes upon any connection, which no one would knowingly use because it's the same as not opening the port to begin with.

The argument could be made that this opens the system up to DDOS attacks, but it should be for the system admin to decide on that risk, not have it forced upon them.
>How-To-Repeat:
In inetd.conf:

127.0.0.1:9000	stream tcp nowait:100 root /dev/null

Make 100 connections to port 9000.
>Fix:
This patch is LLM generated. It applies to -current.

[LLM-generated patch removed]

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: port-amd64-maintainer->bin-bug-people
Responsible-Changed-By: leot@NetBSD.org
Responsible-Changed-When: Sun, 11 Oct 2026 10:51:48 +0000
Responsible-Changed-Why:
Nothing specific to amd64, switch to "bin" category.


>Unformatted:

Home	PR Database Search