r1601291 causes SEGV.

# Failed test 2 in t/ssl/proxy.t at line 56
# Failed test 115 in t/ssl/proxy.t at line 56 fail #3
[  error] oh gosh, server dumped core
[  error] for stacktrace, run: gdb /home/st/c99fix/apache/bin/httpd
-core /home/st/c99fix/httpd-test/t/core.3649
[  error] oh nuts, server dumped core again
[  error] for stacktrace, run: gdb /home/st/c99fix/apache/bin/httpd
-core /home/st/c99fix/httpd-test/t/core.3647
t/ssl/proxy.t .......................
Failed 2/172 subtests

The new function connection_shutdown is a pool cleanup func.
connection_shutdown calls ap_shutdown_conn,
but ap_shutdown_conn finally calls apr_pool_clear!
(see attached strack trace)
[New Thread 3681]
[New Thread 3695]
[New Thread 3704]
[New Thread 3680]
[New Thread 3686]
[New Thread 3682]
[New Thread 3689]
[New Thread 3647]
[New Thread 3690]
[New Thread 3691]
[New Thread 3679]
[New Thread 3678]
[New Thread 3703]
[New Thread 3683]
[New Thread 3702]
[New Thread 3684]
[New Thread 3700]
[New Thread 3685]
[New Thread 3699]
[New Thread 3687]
[New Thread 3698]
[New Thread 3688]
[New Thread 3697]
[New Thread 3692]
[New Thread 3694]
[New Thread 3696]
[New Thread 3693]
[Thread debugging using libthread_db enabled]
Core was generated by `/home/st/c99fix/apache/bin/httpd -d 
/home/st/c99fix/httpd-test/t -f /home/st/c9'.
Program terminated with signal 11, Segmentation fault.
#0  allocator_free (pool=0xa64463b0) at memory/unix/apr_pools.c:381
381             next = node->next;
#0  allocator_free (pool=0xa64463b0) at memory/unix/apr_pools.c:381
#1  apr_pool_clear (pool=0xa64463b0) at memory/unix/apr_pools.c:793
#2  0x08089167 in setaside_remaining_output (f=0xa6456920, ctx=0xa6457140, 
bb=0xa64587d8, c=0x9e4b800) at core_filters.c:636
#3  0x080898e2 in ap_core_output_filter (f=0xa6456920, new_bb=0xa64587d8) at 
core_filters.c:602
#4  0x005428fd in ssl_io_filter_output (f=0xa6434f28, bb=0xa64587d8) at 
ssl_engine_io.c:1726
#5  0x0053fe4a in ssl_io_filter_coalesce (f=0xa6434f10, bb=0xa64587d8) at 
ssl_engine_io.c:1655
#6  0x0809f2d4 in ap_shutdown_conn (c=0x9e4b800, flush=0) at connection.c:85
#7  0x004a4988 in connection_shutdown (theconn=0xa64024c8) at proxy_util.c:2830
#8  0x00de18ee in run_cleanups (pool=0x9e4b480) at memory/unix/apr_pools.c:2352
#9  apr_pool_destroy (pool=0x9e4b480) at memory/unix/apr_pools.c:814
#10 0x00de1bc0 in apr_pool_clear (pool=0xa6402488) at 
memory/unix/apr_pools.c:769
#11 0x004a66ee in connection_cleanup (proxy_function=0x708f8e "HTTPS", 
conn=0xa64024c8, s=0x9db1908) at proxy_util.c:1384
#12 ap_proxy_release_connection (proxy_function=0x708f8e "HTTPS", 
conn=0xa64024c8, s=0x9db1908) at proxy_util.c:2145
#13 0x007068cb in ap_proxy_http_cleanup (r=0xb6c3fa88, worker=0x9d82a00, 
conf=0x9d828b8, url=0xb6c40d7e 
"https://localhost:8532/modules/cgi/nph-foldhdr.pl";, proxyname=0x0, 
proxyport=0) at mod_proxy_http.c:1860
#14 proxy_http_handler (r=0xb6c3fa88, worker=0x9d82a00, conf=0x9d828b8, 
url=0xb6c40d7e "https://localhost:8532/modules/cgi/nph-foldhdr.pl";, 
proxyname=0x0, proxyport=0) at mod_proxy_http.c:2038
#15 0x0049c2d4 in proxy_run_scheme_handler (r=0xb6c3fa88, worker=0x9d82a00, 
conf=0x9d828b8, url=0xb6c40d7e 
"https://localhost:8532/modules/cgi/nph-foldhdr.pl";, proxyhost=0x0, 
proxyport=0) at mod_proxy.c:2774
#16 0x004a187f in proxy_handler (r=0xb6c3fa88) at mod_proxy.c:1157
#17 0x0809444e in ap_run_handler (r=0xb6c3fa88) at config.c:170
#18 0x080983ce in ap_invoke_handler (r=0xb6c3fa88) at config.c:433
#19 0x080ac402 in ap_process_async_request (r=0xb6c3fa88) at http_request.c:317
#20 0x080a8956 in ap_process_http_async_connection (c=0xb6c29d98) at 
http_core.c:143
#21 ap_process_http_connection (c=0xb6c29d98) at http_core.c:228
#22 0x0809f15e in ap_run_process_connection (c=0xb6c29d98) at connection.c:41
#23 0x0056e8e1 in process_socket (thd=0x9cc5c48, dummy=0xb6c00678) at 
event.c:1076
#24 worker_thread (thd=0x9cc5c48, dummy=0xb6c00678) at event.c:2151
#25 0x00ded6c6 in dummy_worker (opaque=0x9cc5c48) at 
threadproc/unix/thread.c:142
#26 0x0073cb39 in start_thread () from /lib/libpthread.so.0
#27 0x002efd7e in clone () from /lib/libc.so.6

Reply via email to