[ 
https://issues.apache.org/jira/browse/DISPATCH-1280?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16797619#comment-16797619
 ] 

michael goulish commented on DISPATCH-1280:
-------------------------------------------

reproduced with simple example.

What I did:

  1. from the lws code tree for 3.0.1 (7 Sep 2018, 
fb31602ff9aeb88267fb8132d48df31195782ae5) use the example 
minimal-examples/http-server/minimal-http-server-tls.

  2. Alter the .c file this way:

         info.options = LWS_SERVER_OPTION_DO_SSL_GLOBAL_INIT |    
{color:#FF0000}LWS_SERVER_OPTION_ALLOW_NON_SSL_ON_SSL_PORT{color} ;

3. build and run it. It listens on 
[https://localhost:7681|https://localhost:7681/] 

4. In browser, do this request:  [http://localhost:7681/index.html]

big bada boom.

 

#0 0x00007f63281fff60 in SSL_get0_alpn_selected () from /lib64/libssl.so.1.1
#1 0x00007f632880ea17 in lws_tls_server_conn_alpn () from 
/usr/local/lib/libwebsockets.so.13
#2 0x00007f632880ee98 in lws_server_socket_service_ssl () from 
/usr/local/lib/libwebsockets.so.13
#3 0x00007f632880d1ad in rops_handle_POLLIN_listen () from 
/usr/local/lib/libwebsockets.so.13
#4 0x00007f6328800389 in lws_service_fd_tsi () from 
/usr/local/lib/libwebsockets.so.13
#5 0x00007f6328816ce7 in _lws_plat_service_tsi.part.1 () from 
/usr/local/lib/libwebsockets.so.13
#6 0x00007f6328800455 in lws_service () from /usr/local/lib/libwebsockets.so.13
#7 0x0000000000400965 in main (argc=1, argv=0x7fff71638b68) at 
minimal-http-server-tls.c:87

 

Next I will see if this still happens with latest code.

 

> http against https enabled listener causes segfault
> ---------------------------------------------------
>
>                 Key: DISPATCH-1280
>                 URL: https://issues.apache.org/jira/browse/DISPATCH-1280
>             Project: Qpid Dispatch
>          Issue Type: Bug
>            Reporter: Gordon Sim
>            Assignee: michael goulish
>            Priority: Major
>
> If you have a listener with http enabled, an ssl profile referenced, but 
> requireSsl set to false, and then try to access it over plain http, you get a 
> segfault in libwebsockets if using version 3.0.1-2. Downgrading to 2.4.2 of 
> libwebsockets fixes this.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to