[
https://issues.apache.org/jira/browse/DISPATCH-1280?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16797619#comment-16797619
]
michael goulish commented on DISPATCH-1280:
-------------------------------------------
reproduced with simple example.
What I did:
1. from the lws code tree for 3.0.1 (7 Sep 2018,
fb31602ff9aeb88267fb8132d48df31195782ae5) use the example
minimal-examples/http-server/minimal-http-server-tls.
2. Alter the .c file this way:
info.options = LWS_SERVER_OPTION_DO_SSL_GLOBAL_INIT |
{color:#FF0000}LWS_SERVER_OPTION_ALLOW_NON_SSL_ON_SSL_PORT{color} ;
3. build and run it. It listens on
[https://localhost:7681|https://localhost:7681/]
4. In browser, do this request: [http://localhost:7681/index.html]
big bada boom.
#0 0x00007f63281fff60 in SSL_get0_alpn_selected () from /lib64/libssl.so.1.1
#1 0x00007f632880ea17 in lws_tls_server_conn_alpn () from
/usr/local/lib/libwebsockets.so.13
#2 0x00007f632880ee98 in lws_server_socket_service_ssl () from
/usr/local/lib/libwebsockets.so.13
#3 0x00007f632880d1ad in rops_handle_POLLIN_listen () from
/usr/local/lib/libwebsockets.so.13
#4 0x00007f6328800389 in lws_service_fd_tsi () from
/usr/local/lib/libwebsockets.so.13
#5 0x00007f6328816ce7 in _lws_plat_service_tsi.part.1 () from
/usr/local/lib/libwebsockets.so.13
#6 0x00007f6328800455 in lws_service () from /usr/local/lib/libwebsockets.so.13
#7 0x0000000000400965 in main (argc=1, argv=0x7fff71638b68) at
minimal-http-server-tls.c:87
Next I will see if this still happens with latest code.
> http against https enabled listener causes segfault
> ---------------------------------------------------
>
> Key: DISPATCH-1280
> URL: https://issues.apache.org/jira/browse/DISPATCH-1280
> Project: Qpid Dispatch
> Issue Type: Bug
> Reporter: Gordon Sim
> Assignee: michael goulish
> Priority: Major
>
> If you have a listener with http enabled, an ssl profile referenced, but
> requireSsl set to false, and then try to access it over plain http, you get a
> segfault in libwebsockets if using version 3.0.1-2. Downgrading to 2.4.2 of
> libwebsockets fixes this.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]