It's been hell lately - sorry for the sloooooow reply

On 1/19/2012 1:13 AM, Sander Temme wrote:
> Interesting... which version of OpenSSL?  Must be 0.9.7 or 0.9.8, because 
> err_cmp() disappeared after that.  And the signature doesn't match what we're 
> seeing in the backtrace.  
>
> And which platform? Solaris?  SPARC or x86_64?

I was building on Sparc - but I'll have to try with openssl 1.0.0.

>
>>  ...
> So the combination of directives causes some memory to be overwitten that 
> ends up pointing outside httpd's allocated address space.  Does the order of 
> the directives matter? 
>
> Which Engine if I may ask?  A fix was applied to the CHIL Engine that removes 
> a dangling cleanup function pointer which caused a segfault on startup on 
> platforms that vary the address location in which libraries are loaded (RHEL 
> 5 being a prime example).  I don't remember off the top of my head which 
> OpenSSL version got the fix.  
>
> Can you reproduce with a non-optimized, debug/symbols enabled build of 
> OpenSSL and Apache?  With the latest versions of each?  
>
> S.
>

I'll try messing with the order and will let you know how I get on - the
chil engine is the one in use but this is a fairly recent openssl
(0.9.8r). I didn't explicitly enable optimization of either build but
did explicitly add "-g" which seemed to create a build of httpd with
debug symbols but a regular old build of openssl. I have some other
platforms available (RHEL being one of them) and will try soon to see
what I get there.

-- 
Daniel Ruggeri

Reply via email to