Package: squid3
Version: 3.3.8-1.2
Severity: normal
Dear Maintainer,
Upgrading from version 3.3.8-1.1+b1 to 3.3.8-1.2 causes a "fail" message to
appear when starting or restarting via the init script. Yet, checking the
running processes shows a running squid3. syslog records the failure as a
segfault as shown in the log entries below. The 08:35 entry is the restart
attempt during the upgrade process. The 08:42 entries are a manual restart
after a reboot. There are no errors recorded for squid3 starting during the
reboot. So, summarizing, while there are error messages printed to the screen
and errors logged in syslog, squid3 gives all the appearance of being
functional after an init script restart.
*** squid.segfault.txt
Sep 2 08:35:48 zabbix squid[4304]: Squid Parent: (squid-1) process 4306 exited
due to signal 11 with status 0
Sep 2 08:35:48 zabbix kernel: [ 974.552150] squid3[4306]: segfault at
fff4 ip b75cabca sp bff5cde0 error 5 in squid3[b7288000+51c000]
Sep 2 08:35:48 zabbix kernel: [ 974.553379] squid3[4304]: segfault at
b810 ip b6c2fbe0 sp bfa31ba0 error 4 in libc-2.19.so[b6bb9000+1a5000]
Sep 2 08:35:49 zabbix squid3[16147]: Squid Parent: will start 1 kids
Sep 2 08:35:49 zabbix squid3[16147]: Squid Parent: (squid-1) process 16150
started
Sep 2 08:42:45 zabbix squid[16147]: Squid Parent: (squid-1) process 16150
exited due to signal 11 with status 0
Sep 2 08:42:45 zabbix kernel: [ 1390.812341] squid3[16150]: segfault at
fff4 ip b75c4bca sp bf8b3890 error 5 in squid3[b7282000+51c000]
Sep 2 08:42:45 zabbix kernel: [ 1390.813335] squid3[16147]: segfault at
b810 ip b6bd9be0 sp bf818290 error 4 in libc-2.19.so[b6b63000+1a5000]
Sep 2 08:44:47 zabbix squid3[4568]: Squid Parent: will start 1 kids
Sep 2 08:44:47 zabbix squid3[4568]: Squid Parent: (squid-1) process 4570
started
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (900, 'testing'), (600, 'stable'), (500, 'stable-updates')
Architecture: i386 (i686)
Kernel: Linux 3.14-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages squid3 depends on:
ii adduser 3.113+nmu3
ii libc62.19-9
ii libcap2 1:2.24-4
ii libcomerr2 1.42.11-2
ii libdb5.3 5.3.28-6
ii libecap2 0.2.0-1
ii libexpat12.1.0-6
ii libgcc1 1:4.9.1-4
ii libgssapi-krb5-2 1.12.1+dfsg-7
ii libk5crypto3 1.12.1+dfsg-7
ii libkrb5-31.12.1+dfsg-7
ii libldap-2.4-22.4.39-1.1+b1
ii libltdl7 2.4.2-1.10
ii libnetfilter-conntrack3 1.0.4-1
ii libpam0g 1.1.8-3.1
ii libsasl2-2 2.1.26.dfsg1-11
ii libstdc++6 4.9.1-4
ii libxml2 2.9.1+dfsg1-4
ii logrotate3.8.7-1
ii lsb-base 4.1+Debian13
ii netbase 5.2
ii squid3-common3.3.8-1.2
squid3 recommends no packages.
Versions of packages squid3 suggests:
pn resolvconf
ii smbclient2:4.1.11+dfsg-1
pn squid-cgi
pn squid-purge
pn squidclient
pn ufw
pn winbindd
-- Configuration Files:
/etc/squid3/squid.conf changed:
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl to_localnet dst 192.168.0.0/16
acl whitelist dstdomain -i "/etc/squid3/whitelist" # "-i" =
case-insensitive
always_direct allow whitelist
cache deny whitelist
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 631 # CUPS
acl SSL_ports port 873 # rsync
acl SSL_ports port 1# webmin
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 631 # CUPS
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl Safe_ports port 8110# SpamBayes POP3 incoming
acl Safe_ports port 8880# SpamBayes web GUI
acl CONNECT method CONNECT
always_direct allow all
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
adapted_http_access allow localnet
adapted_http_access allow localhost
adapted_http_access deny all
http_reply_access allow localnet
http_reply_access allow localhost
http_reply_access deny all
http_port 3128
http_port 3129 intercept
http_port 3130 tproxy
tcp_outgoing_address 192.168.1.226
cache_dir ufs /var/spool/squid3 1000 16 25