[
https://issues.apache.org/jira/browse/TS-3022?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14111528#comment-14111528
]
Alan M. Carroll commented on TS-3022:
-------------------------------------
I think I've replicated this. You must set this up, and then (2 or 3 times) do
* Modify ssl_multicert.config.
* traffic_line -x
Just doing one of these, or doing this sequence just once, has never triggered
the crash for me. I can get it to go off reliably if I do it repeatedly.
The crash is happening when freeing the certinfo instance. However, I cannot
find where the first free happens, even if I break on ats_free with the address
that will eventually cause the double free crash. It appears to crash on the
first free.
> OCSP double free or corruption (!prev)
> --------------------------------------
>
> Key: TS-3022
> URL: https://issues.apache.org/jira/browse/TS-3022
> Project: Traffic Server
> Issue Type: Bug
> Components: SSL
> Reporter: bettydramit
> Assignee: James Peach
> Priority: Blocker
> Fix For: 5.1.0
>
>
> Centos 6 x86_64 gitmaster
> Enable ocsp
> config set
> {code}
> CONFIG proxy.config.ssl.ocsp.enabled INT 1
> CONFIG proxy.config.ssl.ocsp.update_period INT 60
> {code}
> {code}
> [E. Mgmt] log ==> [TrafficManager] using root directory '/usr'
> [TrafficServer] using root directory '/usr'
> *** glibc detected *** /usr/bin/traffic_server: double free or corruption
> (!prev): 0x0000000002af8be0 ***
> ======= Backtrace: =========
> /lib64/libc.so.6(+0x76166)[0x2ac6c2294166]
> /lib64/libc.so.6(+0x78c93)[0x2ac6c2296c93]
> /usr/lib64/libcrypto.so.10(CRYPTO_free+0x1d)[0x2ac6bfb990ad]
> /usr/lib64/libcrypto.so.10(+0x68ada)[0x2ac6bfb9aada]
> /usr/lib64/libssl.so.10(SSL_CTX_free+0x6e)[0x2ac6bf907e7e]
> /usr/bin/traffic_server(_ZN17SSLContextStorageD1Ev+0x59)[0x72c489]
> /usr/bin/traffic_server(_ZN13SSLCertLookupD0Ev+0x29)[0x72c5f9]
> /usr/bin/traffic_server(_ZN18ConfigInfoReleaser12handle_eventEiPv+0x17)[0x665da7]
> /usr/bin/traffic_server(_ZN7EThread13process_eventEP5Eventi+0x8f)[0x73f7bf]
> /usr/bin/traffic_server(_ZN7EThread7executeEv+0x5c3)[0x740173]
> /usr/bin/traffic_server[0x73eb5a]
> /lib64/libpthread.so.0(+0x79d1)[0x2ac6c13109d1]
> {code}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
