Return-Path: 
 <bugs-return-46489-apmail-httpd-bugs-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-bugs-archive@www.apache.org
Delivered-To: apmail-httpd-bugs-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 077EC17CB2
	for <apmail-httpd-bugs-archive@www.apache.org>;
 Wed, 13 May 2015 22:08:03 +0000 (UTC)
Received: (qmail 65305 invoked by uid 500); 13 May 2015 22:08:02 -0000
Delivered-To: apmail-httpd-bugs-archive@httpd.apache.org
Received: (qmail 65256 invoked by uid 500); 13 May 2015 22:08:02 -0000
Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
List-Post: <mailto:bugs@httpd.apache.org>
List-Help: <mailto:bugs-help@httpd.apache.org>
List-Unsubscribe: <mailto:bugs-unsubscribe@httpd.apache.org>
Reply-To: "Apache HTTPD Bugs Notification List" <bugs@httpd.apache.org>
List-Id: <bugs.httpd.apache.org>
Delivered-To: mailing list bugs@httpd.apache.org
Received: (qmail 65247 invoked by uid 99); 13 May 2015 22:08:02 -0000
Received: from mail-relay.apache.org (HELO mail-relay.apache.org)
 (140.211.11.15)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 13 May 2015 22:08:02 +0000
Received: from asf-bz1-us-mid.priv.apache.org (nat1-us-mid.apache.org
 [23.253.172.122])
	by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with
 ESMTPS id 7BDFC1A046D
	for <bugs@httpd.apache.org>; Wed, 13 May 2015 22:08:02 +0000 (UTC)
Received: by asf-bz1-us-mid.priv.apache.org (ASF Mail Server at
 asf-bz1-us-mid.priv.apache.org, from userid 33)
	id 343C461099; Wed, 13 May 2015 22:08:01 +0000 (UTC)
From: bugzilla@apache.org
To: bugs@httpd.apache.org
Subject: [Bug 57927] New: Segmentation Fault at proxy_util.c:994
Date: Wed, 13 May 2015 22:08:00 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: new
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Apache httpd-2
X-Bugzilla-Component: mod_proxy
X-Bugzilla-Version: 2.4.10
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: normal
X-Bugzilla-Who: bhanuska@gmail.com
X-Bugzilla-Status: NEW
X-Bugzilla-Priority: P2
X-Bugzilla-Assigned-To: bugs@httpd.apache.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform
 op_sys bug_status bug_severity priority component assigned_to reporter
Message-ID: <bug-57927-7868@https.bz.apache.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: https://bz.apache.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0

https://bz.apache.org/bugzilla/show_bug.cgi?id=57927

            Bug ID: 57927
           Summary: Segmentation Fault at proxy_util.c:994
           Product: Apache httpd-2
           Version: 2.4.10
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy
          Assignee: bugs@httpd.apache.org
          Reporter: bhanuska@gmail.com

This intermittently happens on Redhat 6.


The rconf has a memory address of 0x0 from 
proxy_req_conf *rconf = ap_get_module_config(r->request_config,
                                                 &proxy_module);

GDB Output
Program terminated with signal 11, Segmentation fault.
#0  0x00007f1483c7efc5 in ap_proxy_cookie_reverse_map (r=0x7f12f000a9b0,
conf=0x7f13e8004528, str=0x7f142cf848ec
"JSESSIONID=3AA0AFCF3E1FF34900C2AC5992452490; Path=/")
    at proxy_util.c:994
994                ent = (struct proxy_alias *)rconf->cookie_paths->elts;
(gdb) bt full
#0  0x00007f1483c7efc5 in ap_proxy_cookie_reverse_map (r=0x7f12f000a9b0,
conf=0x7f13e8004528, str=0x7f142cf848ec
"JSESSIONID=3AA0AFCF3E1FF34900C2AC5992452490; Path=/")
    at proxy_util.c:994
        rconf = 0x0
        ent = <value optimized out>
        len = 51
        newpath = 0x0
        newdomain = 0x0
        pathp = 0x7f142cf8491e "/"
        domainp = <value optimized out>
        pathe = 0x7f142cf8491f ""
        domaine = 0x0
        l1 = 1
        l2 = <value optimized out>
        poffs = 50
        doffs = 0
        i = <value optimized out>
        ddiff = 0
        pdiff = 0
        ret = <value optimized out>
#1  0x00007f1483a679c4 in process_proxy_header (p=0x7f12f000a938, r=<value
optimized out>, backend_ptr=0x7f142cf86b28, worker=0x1293ba0, conf=0x12939e8, 
    server_portstr=0x7f142cf86a70 "") at mod_proxy_http.c:1063
        i = <value optimized out>
        date_hdrs = {0x7f1483a6be79 "Date", 0x7f1483a6c132 "Expires",
0x7f1483a6c13a "Last-Modified", 0x0}
        transform_hdrs = {{name = 0x7f1483a6c119 "Location", func =
0x7f1483c7f0b0 <ap_proxy_location_reverse_map>}, {name = 0x7f1483a6c111
"Content-Location", 
            func = 0x7f1483c7f0b0 <ap_proxy_location_reverse_map>}, {name =
0x7f1483a6c122 "URI", func = 0x7f1483c7f0b0 <ap_proxy_location_reverse_map>}, {
            name = 0x7f1483a6c126 "Destination", func = 0x7f1483c7f0b0
<ap_proxy_location_reverse_map>}, {name = 0x7f1483a6befb "Set-Cookie", 
            func = 0x7f1483c7eb70 <ap_proxy_cookie_reverse_map>}, {name = 0x0,
func = 0}}
#2  ap_proxy_read_headers (p=0x7f12f000a938, r=<value optimized out>,
backend_ptr=0x7f142cf86b28, worker=0x1293ba0, conf=0x12939e8,
server_portstr=0x7f142cf86a70 "")
    at mod_proxy_http.c:1171
        value = <value optimized out>
        end = <value optimized out>
        field =
"\030i\000\220\022\177\000\000\000\000\000\000\000\000\000\000\300\261\373c\372\025\005",
'\000' <repeats 7873 times>"\356, O*\241=", '\000' <repeats 19 times>"\243,
H\370,\024\177\000\000\000\000\000\000\000\000\000\000\003\000\000\000\000\000\000\000\003\000\000\000\000\000\000\000\020I\370,\024\177\000\000\000\000\000\000\002\000\000\000\246H\370,\000\000\000\000\001\000\000\000\000\000\000\000\220H\370,\024\177\000\000\246H\370,\024\177\000\000\340\302X\241=\000\000\000\377H\370,\024\177\000\000\000\000\000\000\000\000\000\000PH\370,\024\177",
'\000' <repeats 100 times>, "2400", '\000' <repeats 18 times>,
"hi\370,\024\177\000\000\320
\006\344\022\177\000\000\300i\370,\024\177\000\000\300\313m\001\000\000\000\000\213\234\324\254\372\025\005"
        psc = 0x12939e8
        dconf = 0x7f13e8004528
        size = 8192
        saw_headers = -268392016
        len = 63
        sconf = <value optimized out>
#3  ap_proxy_http_process_response (p=0x7f12f000a938, r=<value optimized out>,
backend_ptr=0x7f142cf86b28, worker=0x1293ba0, conf=0x12939e8, 
    server_portstr=0x7f142cf86a70 "") at mod_proxy_http.c:1432
        major = <value optimized out>
        minor = 1
        rc = <value optimized out>
        c = 0x7f14781407d8
        buffer = "Set-Cookie\000 JSESSIONID=3AA0AFCF3E1FF34900C2AC5992452490;
Path=/\000\n\313m\001\000\000\000\000\213\234\324\254\372\025\005\000\001\000\000\000\000\000\000\000I&\255\204\024\177\000\000h\317m\001\000\000\000\000\320
\006\344\022\177\000\000\300i\370,\024\177\000\000\373\260B\202\024\177\000\000\061\063/May/2015:14:21:09
-0400\000,\024\177", '\000' <repeats 100 times>, "2400", '\000' <repeats 18
times>"\250,
j\370,\024\177\000\000p)\000\360\022\177\000\000\000k\370,\024\177\000\000\300\313m\0---Type
<return> to continue, or q <return> to quit---
01\000\000\000\000\340\063\063N\372\025\005\000\001"...
        buf = <value optimized out>
        keepchar = <value optimized out>
        e = <value optimized out>
        bb = 0x7f12f0002e70
        tmp_bb = 0x7f12f0002f18
        pass_bb = 0x7f12f0002e90
        len = 15
        backasswards = 0
        interim_response = 0
        pread_len = 0
        save_table = 0x7f12f0002f48
        backend_broke = 0
        hop_by_hop_hdrs = {0x7f1483a6be7e "Keep-Alive", 0x7f1483a6c0eb
"Proxy-Authenticate", 0x7f1483a6c0fe "TE", 0x7f1483a6c101 "Trailer",
0x7f1483a6c109 "Upgrade", 0x0}
        i = <value optimized out>
        te = 0x7f12f000a9b0 "8\251"
        original_status = 200
        proxy_status = <value optimized out>
        original_status_line = 0x0
        proxy_status_line = <value optimized out>
        backend = 0x7f1414004a40
        origin = 0x7f1414006c60
        old_timeout = 0
        dconf = 0x7f13e8004528
        do_100_continue = <value optimized out>
#4  0x00007f1483a6a77b in proxy_http_handler (r=0x7f12f000a9b0,
worker=0x1293ba0, conf=0x12939e8, url=0x7f13e8004896
"http://10.48.172.120:7100/gsi/mat/family/index.jsp", 
    proxyname=0x0, proxyport=2008) at mod_proxy_http.c:2006
        locurl = 0x7f13c80025d0 "/gsi/mat/family/index.jsp"
        status = <value optimized out>
        server_portstr = "\000$\000\310\023\177\000\000\206\375B", '\000'
<repeats 20 times>
        scheme = <value optimized out>
        proxy_function = 0x7f1483a6bfe9 "HTTP"
        u = <value optimized out>
        backend = 0x7f1414004a40
        is_ssl = -402650904
        c = 0x7f14781407d8
        retry = <value optimized out>
        p = 0x7f12f000a938
        uri = 0x7f13c8002518
#5  0x00007f1483c72d52 in proxy_run_scheme_handler (r=0x7f12f000a9b0,
worker=0x1293ba0, conf=0x12939e8, 
    url=0x7f13e8004896 "http://10.48.172.120:7100/gsi/mat/family/index.jsp",
proxyhost=0x0, proxyport=0) at mod_proxy.c:2758
        pHook = <value optimized out>
        n = <value optimized out>
        rv = -1
(gdb) print *r
$1 = {pool = 0x7f12f000a938, connection = 0x7f14781407d8, server = 0x1566ae0,
next = 0x0, prev = 0x0, main = 0x0, the_request = 0x7f12f000bb88 "GET /family/
HTTP/1.1", 
  assbackwards = 0, proxyreq = 2, header_only = 0, proto_num = 1001, protocol =
0x7f12f000bbd8 "HTTP/1.1", hostname = 0x7f12f000bd20 "xxxxxxx.com", 
  request_time = 1431541448162516, status_line = 0x7f12f0002f40 "200 OK",
status = 200, method_number = 0, method = 0x7f12f000bba0 "GET", allowed = 0, 
  allowed_xmethods = 0x0, allowed_methods = 0x7f12f000ac68, sent_bodyct = 0,
bytes_sent = 0, mtime = 0, range = 0x0, clength = 0, chunked = 0, read_body =
0, 
  read_chunked = 0, expecting_100 = 0, kept_body = 0x0, body_table = 0x0,
remaining = 0, read_length = 0, headers_in = 0x7f12f000aca8, headers_out =
0x7f12f00030a0, 
  err_headers_out = 0x7f13c8002170, subprocess_env = 0x7f13c8002298, notes =
0x7f13c8001ec0, content_type = 0x0, handler = 0x7f1483c836b0 "proxy-server", 
  content_encoding = 0x0, content_languages = 0x0, vlist_validator = 0x0, user
= 0x0, ap_auth_type = 0x0, unparsed_uri = 0x7f12f000bbb8 "/family/", 
  uri = 0x7f13e00019f8 "/family/index.jsp", filename = 0x7f13e8004890
"proxy:http://10.48.172.120:7100/xxxxxxx/index.jsp", canonical_filename = 0x0, 
  path_info = 0x0, args = 0x0, used_path_info = 2, eos_sent = 0, per_dir_config
= 0x7f13e8004218, request_config = 0x7f12f000b930, log = 0x1566b00, log_id =
0x0, 
  htaccess = 0x0, output_filters = 0x7f13c8002488, input_filters =
0x7f12f000bd30, proto_output_filters = 0x7f12f000baa8, proto_input_filters =
0x7f12f000bd30, 
  no_cache = 0, no_local_copy = 0, invoke_mtx = 0x7f12f000be68, parsed_uri =
{scheme = 0x0, hostinfo = 0x0, user = 0x0, password = 0x0, hostname = 0x0,
port_str = 0x0, 
    path = 0x7f12f000bbc8 "/family/", query = 0x0, fragment = 0x0, hostent =
0x0, port = 0, is_initialized = 1, dns_looked_up = 0, dns_resolved = 0}, finfo
= {pool = 0x0, 
    valid = 0, protection = 0, filetype = APR_NOFILE, user = 0, group = 0,
inode = 0, device = 0, nlink = 0, size = 0, csize = 0, atime = 0, mtime = 0,
ctime = 0, 
    fname = 0x0, name = 0x0, filehand = 0x0}, useragent_addr = 0x7f12f000bd68,
useragent_ip = 0x7f12f000be58 "178.137.19.143"}

(gdb) print rconf
$3 = (proxy_req_conf *) 0x0

(gdb) print *rconf
Cannot access memory at address 0x0

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org