Project

General

Profile

Bug #876

Segmentation Fault

Added by Anonymous over 12 years ago. Updated almost 11 years ago.

Status:
Fixed
Priority:
High
Assignee:
-
Category:
core
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Missing in 1.5.x:

Description

lighttpd crashes after about 5 hours or more.

When started via the init.d script, there is no error and nothing in the error log. When executed directly from the command line, the error "Segmentation Fault" is shown on the command line, but no error information in the error log.

Server specs:

- P4 2.8GHz with HT

- 2GB RAM

- CentOS 4.4

- Linux Kernel 2.6.9-42

- lighttpd 1.4.12 compiled from source.

lighttpd.conf: (minus comments)


server.modules              = (
                               "mod_rewrite",
                               "mod_redirect",
                               "mod_access",
                               "mod_fastcgi",
                               "mod_compress",
            )

server.document-root        = "/home/www/default/" 

server.errorlog             = "/home/www/logs/lighttpd.error.log" 

index-file.names            = ( "index.php", "index.html",
                                "index.htm", "default.htm" )

mimetype.assign             = (
  ".pdf"          =>      "application/pdf",
  ".sig"          =>      "application/pgp-signature",
  ".spl"          =>      "application/futuresplash",
  ".class"        =>      "application/octet-stream",
  ".ps"           =>      "application/postscript",
  ".torrent"      =>      "application/x-bittorrent",
  ".dvi"          =>      "application/x-dvi",
  ".gz"           =>      "application/x-gzip",
  ".pac"          =>      "application/x-ns-proxy-autoconfig",
  ".swf"          =>      "application/x-shockwave-flash",
  ".tar.gz"       =>      "application/x-tgz",
  ".tgz"          =>      "application/x-tgz",
  ".tar"          =>      "application/x-tar",
  ".zip"          =>      "application/zip",
  ".mp3"          =>      "audio/mpeg",
  ".m3u"          =>      "audio/x-mpegurl",
  ".wma"          =>      "audio/x-ms-wma",
  ".wax"          =>      "audio/x-ms-wax",
  ".ogg"          =>      "application/ogg",
  ".wav"          =>      "audio/x-wav",
  ".gif"          =>      "image/gif",
  ".jpg"          =>      "image/jpeg",
  ".jpeg"         =>      "image/jpeg",
  ".png"          =>      "image/png",
  ".xbm"          =>      "image/x-xbitmap",
  ".xpm"          =>      "image/x-xpixmap",
  ".xwd"          =>      "image/x-xwindowdump",
  ".css"          =>      "text/css",
  ".html"         =>      "text/html",
  ".htm"          =>      "text/html",
  ".js"           =>      "text/javascript",
  ".asc"          =>      "text/plain",
  ".c"            =>      "text/plain",
  ".cpp"          =>      "text/plain",
  ".log"          =>      "text/plain",
  ".conf"         =>      "text/plain",
  ".text"         =>      "text/plain",
  ".txt"          =>      "text/plain",
  ".dtd"          =>      "text/xml",
  ".xml"          =>      "text/xml",
  ".mpeg"         =>      "video/mpeg",
  ".mpg"          =>      "video/mpeg",
  ".mov"          =>      "video/quicktime",
  ".qt"           =>      "video/quicktime",
  ".avi"          =>      "video/x-msvideo",
  ".asf"          =>      "video/x-ms-asf",
  ".asx"          =>      "video/x-ms-asf",
  ".wmv"          =>      "video/x-ms-wmv",
  ".bz2"          =>      "application/x-bzip",
  ".tbz"          =>      "application/x-bzip-compressed-tar",
  ".tar.bz2"      =>      "application/x-bzip-compressed-tar" 
 )

url.access-deny             = ( "~", ".inc" )

$HTTP["url"] =~ "\.pdf$" {
  server.range-requests = "disable" 
}

$HTTP["host"] !~ "^(www|mail|mysql)" {
    $HTTP["host"] =~ "^(.*)" {
        url.redirect = ("^/(.*)" => "http://www.%1/$1")
    }
}

$HTTP["host"] =~ "^mail\." {
    server.document-root = "/home/www/common/mail" 
    fastcgi.server = ( ".php" =>
                       (
                          ( "socket" => "/home/www/fastcgi/common/common.socket",
                            "check-local" => "disable",
                            "broken-scriptfilename" => "enable" 
                          )
                        )
                      )    
}

$HTTP["host"] =~ "^mysql\." {
    server.document-root = "/home/www/common/mysql" 
    fastcgi.server = ( ".php" =>
                       (
                          ( "socket" => "/home/www/fastcgi/common/common.socket",
                            "check-local" => "disable",
                            "broken-scriptfilename" => "enable" 
                          )
                        )
                      )
}

include "vhosts.conf" # <-- This just contains simple $HTTP["host"] == "www.domain.com" matching.

server.username            = "lighttpd" 
server.groupname           = "lighttpd" 

compress.cache-dir         = "/tmp" 
compress.filetype          = (
                  "text/html",
                              "text/plain",
                              "text/xml",
                              "text/css",
                              "text/javascript",
                              "application/xml",
                              "application/xhtml+xml",
                              "application/x-shockwave-flash",
                              "application/x-javascript",
                              "application/octet-stream" 
                 )

Result from Valgrind/Memcheck:

lighttpd.12903:


==12903== Memcheck, a memory error detector.[[BR]]
==12903== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al.
==12903== Using LibVEX rev 1575, a library for dynamic binary translation.
==12903== Copyright (C) 2004-2005, and GNU GPL'd, by OpenWorks LLP.
==12903== Using valgrind-3.1.1, a dynamic binary instrumentation framework.
==12903== Copyright (C) 2000-2005, and GNU GPL'd, by Julian Seward et al.
==12903== 
==12903== My PID = 12903, parent PID = 12736.  Prog and args are:
==12903==    lighttpd
==12903==    -D
==12903==    -f
==12903==    ./lighttpd.conf
==12903== 
--12903-- 
--12903-- Command line
--12903--    lighttpd
--12903--    -D
--12903--    -f
--12903--    ./lighttpd.conf
--12903-- Startup, with flags:
--12903--    --tool=memcheck
--12903--    -v
--12903--    --log-file=lighttpd
--12903--    --num-callers=8
--12903-- Contents of /proc/version:
--12903--   Linux version 2.6.9-42.0.2.plus.c4smp (buildsvn@build-i386) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-3)) #1 SMP Fri Aug 25 17:59:58 CDT 2006
--12903-- Arch and subarch: X86, x86-sse2
--12903-- Valgrind library directory: /usr/lib/valgrind
--12903-- Reading syms from /lib/ld-2.3.4.so (0x7A9000)
--12903-- Reading syms from /usr/local/sbin/lighttpd (0x8048000)
--12903-- Reading syms from /usr/lib/valgrind/x86-linux/memcheck (0xB0000000)
--12903--    object doesn't have a dynamic symbol table
--12903-- Reading suppressions file: /usr/lib/valgrind/default.supp
--12903-- REDIR: 0x7BAFD0 (index) redirected to 0xB001BC86 (vgPlain_x86_linux_REDIR_FOR_index)
--12903-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_core.so (0x4000000)
--12903-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so (0x4003000)
--12903-- REDIR: 0x7BB170 (strlen) redirected to 0x4005E90 (strlen)
--12903-- Reading syms from /lib/libpcre.so.0.0.1 (0x8F4000)
--12903--    object doesn't have a symbol table
--12903-- Reading syms from /lib/libdl-2.3.4.so (0x904000)
--12903-- Reading syms from /lib/tls/libc-2.3.4.so (0x7C7000)
--12903-- REDIR: 0x830690 (rindex) redirected to 0x4005B9C (rindex)
--12903-- REDIR: 0x82FD50 (strcmp) redirected to 0x4006114 (strcmp)
--12903-- REDIR: 0x82B0A0 (calloc) redirected to 0x4005639 (calloc)
--12903-- REDIR: 0x82B380 (malloc) redirected to 0x4004386 (malloc)
--12903-- REDIR: 0x831A10 (memcpy) redirected to 0x40061A8 (memcpy)
--12903-- REDIR: 0x7A97A0 (_dl_sysinfo_int80) redirected to 0xB001BC83 (???)
--12903-- REDIR: 0x8302B0 (strlen) redirected to 0x4005E74 (strlen)
--12903-- REDIR: 0x82FBE0 (index) redirected to 0x4005C4C (index)
--12903-- REDIR: 0x831480 (memmove) redirected to 0x40065A8 (memmove)
--12903-- REDIR: 0x8304B0 (strncmp) redirected to 0x40060C4 (strncmp)
--12903-- REDIR: 0x8316E0 (stpcpy) redirected to 0x4006348 (stpcpy)
--12903-- REDIR: 0x8292B0 (free) redirected to 0x4004E7D (free)
--12903-- REDIR: 0x82FDC0 (strcpy) redirected to 0x4005EC8 (strcpy)
--12903-- REDIR: 0x8314F0 (memset) redirected to 0x4006588 (memset)
--12903-- REDIR: 0x82B9C0 (realloc) redirected to 0x40056E4 (realloc)
==12903== 
==12903== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 14 from 1)
--12903-- 
--12903-- supp:   14 Ubuntu-stripped-ld.so
==12903== malloc/free: in use at exit: 0 bytes in 0 blocks.
==12903== malloc/free: 83 allocs, 83 frees, 5,570 bytes allocated.
==12903== 
==12903== All heap blocks were freed -- no leaks are possible.
--12903--  memcheck: sanity checks: 0 cheap, 1 expensive
--12903--  memcheck: auxmaps: 0 auxmap entries (0k, 0M) in use
--12903--  memcheck: auxmaps: 0 searches, 0 comparisons
--12903--  memcheck: secondaries: 12 issued (768k, 0M)
--12903--  memcheck: secondaries: 18 accessible and distinguished (1152k, 1M)
--12903--     tt/tc: 5,120 tt lookups requiring 5,187 probes
--12903--     tt/tc: 5,120 fast-cache updates, 3 flushes
--12903-- translate: new        2,444 (51,738 -> 862,960; ratio 166:10) [0 scs]
--12903-- translate: dumped     0 (0 -> ??)
--12903-- translate: discarded  6 (144 -> ??)
--12903-- scheduler: 44,015 jumps (bb entries).
--12903-- scheduler: 0/2,904 major/minor sched events.
--12903--    sanity: 1 cheap, 1 expensive checks.
--12903--    exectx: 30,011 lists, 134 contexts (avg 0 per list)
--12903--    exectx: 180 searches, 46 full compares (255 per 1000)
--12903--    exectx: 0 cmp2, 39 cmp4, 0 cmpAll

lighttpd.12904:


==12904== Memcheck, a memory error detector.
==12904== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al.
==12904== Using LibVEX rev 1575, a library for dynamic binary translation.
==12904== Copyright (C) 2004-2005, and GNU GPL'd, by OpenWorks LLP.
==12904== Using valgrind-3.1.1, a dynamic binary instrumentation framework.
==12904== Copyright (C) 2000-2005, and GNU GPL'd, by Julian Seward et al.
==12904== 
==12904== My PID = 12904, parent PID = 12736.  Prog and args are:
==12904==    lighttpd
==12904==    -D
==12904==    -f
==12904==    /etc/lighttpd/lighttpd.conf
==12904== 
--12904-- 
--12904-- Command line
--12904--    lighttpd
--12904--    -D
--12904--    -f
--12904--    /etc/lighttpd/lighttpd.conf
--12904-- Startup, with flags:
--12904--    --tool=memcheck
--12904--    -v
--12904--    --log-file=lighttpd
--12904--    --num-callers=8
--12904-- Contents of /proc/version:
--12904--   Linux version 2.6.9-42.0.2.plus.c4smp (buildsvn@build-i386) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-3)) #1 SMP Fri Aug 25 17:59:58 CDT 2006
--12904-- Arch and subarch: X86, x86-sse2
--12904-- Valgrind library directory: /usr/lib/valgrind
--12904-- Reading syms from /lib/ld-2.3.4.so (0x7A9000)
--12904-- Reading syms from /usr/local/sbin/lighttpd (0x8048000)
--12904-- Reading syms from /usr/lib/valgrind/x86-linux/memcheck (0xB0000000)
--12904--    object doesn't have a dynamic symbol table
--12904-- Reading suppressions file: /usr/lib/valgrind/default.supp
--12904-- REDIR: 0x7BAFD0 (index) redirected to 0xB001BC86 (vgPlain_x86_linux_REDIR_FOR_index)
--12904-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_core.so (0x4000000)
--12904-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so (0x4003000)
--12904-- REDIR: 0x7BB170 (strlen) redirected to 0x4005E90 (strlen)
--12904-- Reading syms from /lib/libpcre.so.0.0.1 (0x8F4000)
--12904--    object doesn't have a symbol table
--12904-- Reading syms from /lib/libdl-2.3.4.so (0x904000)
--12904-- Reading syms from /lib/tls/libc-2.3.4.so (0x7C7000)
--12904-- REDIR: 0x830690 (rindex) redirected to 0x4005B9C (rindex)
--12904-- REDIR: 0x82FD50 (strcmp) redirected to 0x4006114 (strcmp)
--12904-- REDIR: 0x82B0A0 (calloc) redirected to 0x4005639 (calloc)
--12904-- REDIR: 0x82B380 (malloc) redirected to 0x4004386 (malloc)
--12904-- REDIR: 0x831A10 (memcpy) redirected to 0x40061A8 (memcpy)
--12904-- REDIR: 0x7A97A0 (_dl_sysinfo_int80) redirected to 0xB001BC83 (???)
--12904-- REDIR: 0x8302B0 (strlen) redirected to 0x4005E74 (strlen)
--12904-- REDIR: 0x82FBE0 (index) redirected to 0x4005C4C (index)
--12904-- REDIR: 0x831480 (memmove) redirected to 0x40065A8 (memmove)
--12904-- REDIR: 0x8292B0 (free) redirected to 0x4004E7D (free)
--12904-- REDIR: 0x82B9C0 (realloc) redirected to 0x40056E4 (realloc)
--12904-- Reading syms from /usr/local/lib/mod_indexfile.so (0x4008000)
--12904-- Reading syms from /usr/local/lib/mod_rewrite.so (0x400A000)
--12904-- Reading syms from /usr/local/lib/mod_redirect.so (0x410F000)
--12904-- Reading syms from /usr/local/lib/mod_access.so (0x4112000)
--12904-- Reading syms from /usr/local/lib/mod_fastcgi.so (0x4114000)
--12904-- Reading syms from /usr/local/lib/mod_compress.so (0x411F000)
--12904-- Reading syms from /usr/lib/libz.so.1.2.1.2 (0x97D000)
--12904--    object doesn't have a symbol table
--12904-- Reading syms from /usr/lib/libbz2.so.1.0.2 (0x732000)
--12904--    object doesn't have a symbol table
--12904-- Reading syms from /usr/local/lib/mod_dirlisting.so (0x4123000)
--12904-- Reading syms from /usr/local/lib/mod_staticfile.so (0x4128000)
--12904-- REDIR: 0x8304B0 (strncmp) redirected to 0x40060C4 (strncmp)
--12904-- REDIR: 0x8316E0 (stpcpy) redirected to 0x4006348 (stpcpy)
--12904-- REDIR: 0x82FDC0 (strcpy) redirected to 0x4005EC8 (strcpy)
--12904-- REDIR: 0x8314F0 (memset) redirected to 0x4006588 (memset)
==12904== 
==12904== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 32 from 2)
--12904-- 
--12904-- supp:   14 Ubuntu-stripped-ld.so
--12904-- supp:   18 dl_relocate_object
==12904== malloc/free: in use at exit: 86,672 bytes in 2,038 blocks.
==12904== malloc/free: 5,110 allocs, 3,072 frees, 203,750 bytes allocated.
==12904== 
==12904== searching for pointers to 2,038 not-freed blocks.
==12904== checked 104,508 bytes.
==12904== 
==12904== LEAK SUMMARY:
==12904==    definitely lost: 77,031 bytes in 1,946 blocks.
==12904==      possibly lost: 92 bytes in 2 blocks.
==12904==    still reachable: 9,549 bytes in 90 blocks.
==12904==         suppressed: 0 bytes in 0 blocks.
==12904== Use --leak-check=full to see details of leaked memory.
--12904--  memcheck: sanity checks: 9 cheap, 1 expensive
--12904--  memcheck: auxmaps: 0 auxmap entries (0k, 0M) in use
--12904--  memcheck: auxmaps: 0 searches, 0 comparisons
--12904--  memcheck: secondaries: 26 issued (1664k, 1M)
--12904--  memcheck: secondaries: 18 accessible and distinguished (1152k, 1M)
--12904--     tt/tc: 7,602 tt lookups requiring 7,768 probes
--12904--     tt/tc: 7,602 fast-cache updates, 3 flushes
--12904-- translate: new        3,567 (78,943 -> 1,296,174; ratio 164:10) [0 scs]
--12904-- translate: dumped     0 (0 -> ??)
--12904-- translate: discarded  6 (144 -> ??)
--12904-- scheduler: 492,073 jumps (bb entries).
--12904-- scheduler: 9/12,356 major/minor sched events.
--12904--    sanity: 10 cheap, 1 expensive checks.
--12904--    exectx: 30,011 lists, 417 contexts (avg 0 per list)
--12904--    exectx: 8,214 searches, 7,798 full compares (949 per 1000)
--12904--    exectx: 0 cmp2, 86 cmp4, 0 cmpAll

lighttpd.12944:


==12944== Memcheck, a memory error detector.
==12944== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al.
==12944== Using LibVEX rev 1575, a library for dynamic binary translation.
==12944== Copyright (C) 2004-2005, and GNU GPL'd, by OpenWorks LLP.
==12944== Using valgrind-3.1.1, a dynamic binary instrumentation framework.
==12944== Copyright (C) 2000-2005, and GNU GPL'd, by Julian Seward et al.
==12944== 
==12944== My PID = 12944, parent PID = 12736.  Prog and args are:
==12944==    lighttpd
==12944==    -D
==12944==    -f
==12944==    /etc/lighttpd/lighttpd.conf
==12944== 
--12944-- 
--12944-- Command line
--12944--    lighttpd
--12944--    -D
--12944--    -f
--12944--    /etc/lighttpd/lighttpd.conf
--12944-- Startup, with flags:
--12944--    --tool=memcheck
--12944--    -v
--12944--    --log-file=lighttpd
--12944--    --num-callers=8
--12944-- Contents of /proc/version:
--12944--   Linux version 2.6.9-42.0.2.plus.c4smp (buildsvn@build-i386) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-3)) #1 SMP Fri Aug 25 17:59:58 CDT 2006
--12944-- Arch and subarch: X86, x86-sse2
--12944-- Valgrind library directory: /usr/lib/valgrind
--12944-- Reading syms from /lib/ld-2.3.4.so (0x7A9000)
--12944-- Reading syms from /usr/local/sbin/lighttpd (0x8048000)
--12944-- Reading syms from /usr/lib/valgrind/x86-linux/memcheck (0xB0000000)
--12944--    object doesn't have a dynamic symbol table
--12944-- Reading suppressions file: /usr/lib/valgrind/default.supp
--12944-- REDIR: 0x7BAFD0 (index) redirected to 0xB001BC86 (vgPlain_x86_linux_REDIR_FOR_index)
--12944-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_core.so (0x4000000)
--12944-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so (0x4003000)
--12944-- REDIR: 0x7BB170 (strlen) redirected to 0x4005E90 (strlen)
--12944-- Reading syms from /lib/libpcre.so.0.0.1 (0x8F4000)
--12944--    object doesn't have a symbol table
--12944-- Reading syms from /lib/libdl-2.3.4.so (0x904000)
--12944-- Reading syms from /lib/tls/libc-2.3.4.so (0x7C7000)
--12944-- REDIR: 0x830690 (rindex) redirected to 0x4005B9C (rindex)
--12944-- REDIR: 0x82FD50 (strcmp) redirected to 0x4006114 (strcmp)
--12944-- REDIR: 0x82B0A0 (calloc) redirected to 0x4005639 (calloc)
--12944-- REDIR: 0x82B380 (malloc) redirected to 0x4004386 (malloc)
--12944-- REDIR: 0x831A10 (memcpy) redirected to 0x40061A8 (memcpy)
--12944-- REDIR: 0x7A97A0 (_dl_sysinfo_int80) redirected to 0xB001BC83 (???)
--12944-- REDIR: 0x8302B0 (strlen) redirected to 0x4005E74 (strlen)
--12944-- REDIR: 0x82FBE0 (index) redirected to 0x4005C4C (index)
--12944-- REDIR: 0x831480 (memmove) redirected to 0x40065A8 (memmove)
--12944-- REDIR: 0x8292B0 (free) redirected to 0x4004E7D (free)
--12944-- REDIR: 0x82B9C0 (realloc) redirected to 0x40056E4 (realloc)
--12944-- Reading syms from /usr/local/lib/mod_indexfile.so (0x4008000)
--12944-- Reading syms from /usr/local/lib/mod_rewrite.so (0x400A000)
--12944-- Reading syms from /usr/local/lib/mod_redirect.so (0x410F000)
--12944-- Reading syms from /usr/local/lib/mod_access.so (0x4112000)
--12944-- Reading syms from /usr/local/lib/mod_fastcgi.so (0x4114000)
--12944-- Reading syms from /usr/local/lib/mod_compress.so (0x411F000)
--12944-- Reading syms from /usr/lib/libz.so.1.2.1.2 (0x97D000)
--12944--    object doesn't have a symbol table
--12944-- Reading syms from /usr/lib/libbz2.so.1.0.2 (0x732000)
--12944--    object doesn't have a symbol table
--12944-- Reading syms from /usr/local/lib/mod_dirlisting.so (0x4123000)
--12944-- Reading syms from /usr/local/lib/mod_staticfile.so (0x4128000)
--12944-- REDIR: 0x830FF0 (memchr) redirected to 0x4006184 (memchr)
--12944-- REDIR: 0x832340 (strchrnul) redirected to 0x40065FC (strchrnul)
--12944-- REDIR: 0x8316E0 (stpcpy) redirected to 0x4006348 (stpcpy)
--12944-- Reading syms from /lib/libnss_files-2.3.4.so (0x4131000)
--12944-- REDIR: 0x82FDC0 (strcpy) redirected to 0x4005EC8 (strcpy)
--12944-- REDIR: 0x832270 (rawmemchr) redirected to 0x4006618 (rawmemchr)
--12944-- REDIR: 0x7BB540 (stpcpy) redirected to 0x4006408 (stpcpy)
--12944-- REDIR: 0x8314F0 (memset) redirected to 0x4006588 (memset)
--12944-- REDIR: 0x8304B0 (strncmp) redirected to 0x40060C4 (strncmp)
--12944-- REDIR: 0x8305D0 (strncpy) redirected to 0x4005F84 (strncpy)
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8426E9: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060E75: http_response_handle_cachable (http-header-glue.c:327)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8427AC: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060E75: http_response_handle_cachable (http-header-glue.c:327)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x98118E: (within /usr/lib/libz.so.1.2.1.2)
==12944==    by 0x98206F: (within /usr/lib/libz.so.1.2.1.2)
==12944==    by 0x980505: deflate (in /usr/lib/libz.so.1.2.1.2)
==12944==    by 0x41204E4: deflate_file_to_buffer_gzip (mod_compress.c:199)
==12944==    by 0x41211E2: mod_compress_physical (mod_compress.c:425)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944== 
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8426E9: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060F74: http_response_handle_cachable (http-header-glue.c:283)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8427AC: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060F74: http_response_handle_cachable (http-header-glue.c:283)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== More than 100000 total errors detected.  I'm not reporting any more.
==12944== Final error counts will be inaccurate.  Go fix your program!
==12944== Rerun with --error-limit=no to disable this cutoff.  Note
==12944== that errors may occur in your program without prior warning from
==12944== Valgrind, because errors are no longer being displayed.
==12944== 
==12944== 
==12944== Process terminating with default action of signal 11 (SIGSEGV)
==12944==  Access not within mapped region at address 0x4130FFF
==12944==    at 0x4006249: memcpy (mac_replace_strmem.c:394)
==12944==    by 0x805878C: buffer_copy_string_len (buffer.c:149)
==12944==    by 0x8050D62: connection_handle_read_state (connections.c:1104)
==12944==    by 0x805172E: connection_state_machine (connections.c:1591)
==12944==    by 0x804DD94: main (server.c:1300)
--12944-- discard syms at 0x4131000-0x413C000 in /lib/libnss_files-2.3.4.so due to munmap()
==12944== 
==12944== ERROR SUMMARY: 100000 errors from 5 contexts (suppressed: 34 from 2)
==12944== 
==12944== 2 errors in context 1 of 5:
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8426E9: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060F74: http_response_handle_cachable (http-header-glue.c:283)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== 20 errors in context 2 of 5:
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x98118E: (within /usr/lib/libz.so.1.2.1.2)
==12944==    by 0x98206F: (within /usr/lib/libz.so.1.2.1.2)
==12944==    by 0x980505: deflate (in /usr/lib/libz.so.1.2.1.2)
==12944==    by 0x41204E4: deflate_file_to_buffer_gzip (mod_compress.c:199)
==12944==    by 0x41211E2: mod_compress_physical (mod_compress.c:425)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944== 
==12944== 112 errors in context 3 of 5:
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8426E9: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060E75: http_response_handle_cachable (http-header-glue.c:327)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== 1788 errors in context 4 of 5:
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8427AC: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060F74: http_response_handle_cachable (http-header-glue.c:283)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
==12944== 
==12944== 98078 errors in context 5 of 5:
==12944== Conditional jump or move depends on uninitialised value(s)
==12944==    at 0x8427AC: __mktime_internal (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x842DA5: mktime (in /lib/tls/libc-2.3.4.so)
==12944==    by 0x8060E75: http_response_handle_cachable (http-header-glue.c:327)
==12944==    by 0x4129202: mod_staticfile_subrequest (mod_staticfile.c:453)
==12944==    by 0x805C0B8: plugins_call_handle_subrequest_start (plugin.c:268)
==12944==    by 0x804F2F8: http_response_prepare (response.c:609)
==12944==    by 0x8051776: connection_state_machine (connections.c:1385)
==12944==    by 0x80522CA: network_server_handle_fdevent (network.c:51)
--12944-- 
--12944-- supp:   14 Ubuntu-stripped-ld.so
--12944-- supp:   20 dl_relocate_object
==12944== 
==12944== IN SUMMARY: 100000 errors from 5 contexts (suppressed: 34 from 2)
==12944== 
==12944== malloc/free: in use at exit: 16,598,563 bytes in 87,025 blocks.
==12944== malloc/free: 14,093,056 allocs, 14,006,031 frees, 942,404,810 bytes allocated.
==12944== 
==12944== searching for pointers to 87,025 not-freed blocks.
==12944== checked 9,693,780 bytes.
==12944== 
==12944== LEAK SUMMARY:
==12944==    definitely lost: 5,966,436 bytes in 32,768 blocks.
==12944==      possibly lost: 728,628 bytes in 380 blocks.
==12944==    still reachable: 9,903,499 bytes in 53,877 blocks.
==12944==         suppressed: 0 bytes in 0 blocks.
==12944== Use --leak-check=full to see details of leaked memory.
--12944--  memcheck: sanity checks: 614839 cheap, 24594 expensive
--12944--  memcheck: auxmaps: 0 auxmap entries (0k, 0M) in use
--12944--  memcheck: auxmaps: 0 searches, 0 comparisons
--12944--  memcheck: secondaries: 4670 issued (298880k, 291M)
--12944--  memcheck: secondaries: 18 accessible and distinguished (1152k, 1M)
--12944--     tt/tc: 112,031,215 tt lookups requiring 124,067,799 probes
--12944--     tt/tc: 112,031,215 fast-cache updates, 4 flushes
--12944-- translate: new        8,718 (195,784 -> 3,326,803; ratio 169:10) [0 scs]
--12944-- translate: dumped     0 (0 -> ??)
--12944-- translate: discarded  133 (2,468 -> ??)
--12944-- scheduler: 30,741,990,772 jumps (bb entries).
--12944-- scheduler: 614,839/161,243,386 major/minor sched events.
--12944--    sanity: 614840 cheap, 24594 expensive checks.
--12944--    exectx: 30,011 lists, 1,445 contexts (avg 0 per list)
--12944--    exectx: 28,199,121 searches, 28,353,072 full compares (1,005 per 1000)
--12944--    exectx: 0 cmp2, 100,371 cmp4, 0 cmpAll

-- Martyo

Associated revisions

Revision 1352 (diff)
Added by jan over 12 years ago

fixed off-by-one bug when the second CRLF after a HTTP-header is in a second read() call

- fixes #876

Revision 4581a73a (diff)
Added by jan over 12 years ago

fixed off-by-one bug when the second CRLF after a HTTP-header is in a second read() call

- fixes #876

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@1352 152afb58-edef-0310-8abb-c4023f1b3aa9

History

#1

Updated by Anonymous over 12 years ago

Why is that image attached? Has this trac been hacked?

-- Martyo

#2

Updated by jan over 12 years ago

  • Status changed from New to Fixed
  • Resolution set to fixed

fixed in r1352

Also available in: Atom