Stanislav Malyshev via RT wrote:
I have discovered something that seems to be a crash in OpenSSL running with
Apache+mod_ssl. It happens when SSL connection times out (I simulate it by
suspending the reader process, but it happens also in production with very slow
clients). Apache gives message: send mmap timed out and then segfault happens.
...
I'm not sure if the OpenSSL is the reason for the crash
or Apache is using it in a wrong way, but the SEGV seems to be happening in
OpenSSL code so I send it to this list, if it belongs elsewhere please point me
to the right place.
I also tried to research it somewhat more, it seems that what is happening
is that on some stage when timeout happens OpenSSL returns OK result from
SSL_write but somehow s->s2 and s->s3 become NULL, so on next SSL_write it
crashes. I'd appreciate guidance on what could be the problem.
OS is Linux on x86, OpenSSL compiled by gcc 2.96.
You might want to try reproducing the problem under Valgrind;
it might give you earlier information about the
error, and possibly help you find out whether it's
Apache or OpenSSL at fault.
- Dan
--
Trying to get a job as a c++ developer? See
http://kegel.com/academy/getting-hired.html
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
