-------- Original Message --------
Subject: Re: [Cherokee] cherokee crashes on slowloris https check?
From: Stefan de Konink <[email protected]>
To: Michiel van Es <[email protected]>
Date: 07/07/2009 03:03 PM

> Michiel van Es wrote:
>> Hi,
> 
>> I am running slowloris against my cherokee SSL website and could not
>> connect to my https website anymore.
>> Logfile shows:
>> Jul  7 14:22:59 pcintelw01 cherokee-worker: *** glibc detected ***
>> /usr/local/sbin/cherokee-worker: double free or co
>> rruption (!prev): 0xabcec248 ***
> 
> 
>> Is it a small bug in cherokee or something else?
> 
> Pretty please do! You could help us even more by doing the following:
> 
> Compile cherokee with -g (that is the default option). Run:
> 
> gdb --args /path/to/cherokee-worker
> r
> 
> [try to crash it again]
> 
> if it crashes:
> 
> bt

The output:

[r...@pcintelw01 ~]# gdb --args /usr/local/sbin/cherokee-worker
GNU gdb Fedora (6.8-27.el5)
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.

There is NO WARRANTY, to the extent permitted by law.  Type "show
copying"
and "show warranty" for details.

This GDB was configured as "i386-redhat-linux-gnu"...

(gdb) r

Starting program: /usr/local/sbin/cherokee-worker

[Thread debugging using libthread_db enabled]

[New Thread 0xb7f396c0 (LWP 2894)]

[07/06/2009 15:26:43.075] (critical) spawner.c:86 - Could initialize SHM
'/cherokee-spawner-2893': Operation not permitted


[New Thread 0xb7f38b90 (LWP 2897)]

[New Thread 0xb7537b90 (LWP 2898)]

[New Thread 0xb6b36b90 (LWP 2899)]

[New Thread 0xb6135b90 (LWP 2900)]

[New Thread 0xb5734b90 (LWP 2901)]

[New Thread 0xb4d33b90 (LWP 2902)]

[New Thread 0xb4332b90 (LWP 2903)]

[New Thread 0xb3931b90 (LWP 2904)]

[New Thread 0xb2f30b90 (LWP 2905)]

[New Thread 0xb252fb90 (LWP 2906)]

[New Thread 0xb1b2eb90 (LWP 2907)]

[New Thread 0xb112db90 (LWP 2908)]

[New Thread 0xb072cb90 (LWP 2909)]

[New Thread 0xafd2bb90 (LWP 2910)]

[New Thread 0xaf32ab90 (LWP 2911)]

[New Thread 0xae929b90 (LWP 2912)]

[New Thread 0xadf28b90 (LWP 2913)]

[New Thread 0xad527b90 (LWP 2914)]
[New Thread 0xacb26b90 (LWP 2915)]
Cherokee Web Server 0.99.21 (Jul  2 2009): Listening on ports
80.79.194.24:80,
80.79.194.24:443(TLS), 80.79.194.25:443(TLS), 80.79.194.25:80, with TLS
support via libssl, IPv6 enabled, using epoll, 2048 fds system limit, max.
1016 connections, caching I/O, 20 threads, 50 connections per thread,
standard scheduling policy
Detaching after fork from child process 2916.

Program received signal SIGPIPE, Broken pipe.
[Switching to Thread 0xb112db90 (LWP 2908)]
0x00675402 in __kernel_vsyscall ()
(gdb) bt
#0  0x00675402 in __kernel_vsyscall ()
#1  0x00b7344b in write () from /lib/libpthread.so.0
#2  0x0015bd01 in ?? () from /lib/libcrypto.so.6
#3  0x00159c83 in BIO_write () from /lib/libcrypto.so.6
#4  0x00327daf in ssl3_write_pending () from /lib/libssl.so.6
#5  0x003280ce in ?? () from /lib/libssl.so.6
#6  0x0032825e in ssl3_dispatch_alert () from /lib/libssl.so.6
#7  0x00327cba in ssl3_send_alert () from /lib/libssl.so.6
#8  0x00325b76 in ssl3_shutdown () from /lib/libssl.so.6
#9  0x003368dc in SSL_shutdown () from /lib/libssl.so.6
#10 0x00242d50 in _socket_close (cryp=0xabd3f510) at cryptor_libssl.c:524
#11 0x002cf79a in cherokee_cryptor_socket_close (cryp=0xabdaf460) at
cryptor.c:202
#12 0x002d10e7 in cherokee_socket_close (socket=0xabd3ee80) at socket.c:194
#13 0x00be1448 in cherokee_connection_clean_close (conn=0xabd3ee58) at
connection.c:368
#14 0x00be83e7 in purge_connection (thread=0x961cfe0, conn=0xabd3ee58)
at thread.c:332
#15 0x00be90cb in process_active_connections (thd=0x961cfe0) at
thread.c:1254
#16 0x00be9bb3 in cherokee_thread_step_MULTI_THREAD (thd=0x961cfe0,
dont_block=false) at thread.c:1749
#17 0x00bea3f0 in thread_routine (data=0x961cfe0) at thread.c:98
#18 0x00b6c49b in start_thread () from /lib/libpthread.so.0
#19 0x00aec42e in clone () from /lib/libc.so.6
(gdb)


> 
> And paste the output the the bug track system or mailinglist.
> 
> 
> Stefan

Michiel
_______________________________________________
Cherokee mailing list
[email protected]
http://lists.octality.com/listinfo/cherokee

Reply via email to