httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "MATHIHALLI,MADHUSUDAN (HP-Cupertino,ex1)" <>
Subject RE: [PATCH - Apache 1.3] Apache 1.3.26 + mod_ssl 2.8.10 dumps cor e
Date Mon, 05 Aug 2002 05:15:21 GMT
I do realize that the Apache community does not support such a usage of
Apache (with mod_ssl) - but I was wondering if somebody could atleast tell
me if the patch was okay / not okay. 


-----Original Message-----
To: ''
Cc: ''
Sent: 8/4/02 10:08 AM
Subject: [PATCH - Apache 1.3] Apache 1.3.26 + mod_ssl 2.8.10 dumps core

	I'm not sure whom to approach for this problem - so I'm sending
to both the mailing lists. Here's a pretty easy way to reproduce the
that I'm experiencing (on HP-UX 11.0 / 11i)

1. Download OpenSSL 0.9.6e, Apache 1.3.26 and mod_ssl 2.8.10
2. Build and install Apache (ofcourse with mod_ssl capability)
3. Set the Timeout to 20 secs (pl. note it's the hard timeout and not
keepalive / SSLSessionCacheTimeout)
4. Create a simple HTML file (/opt/apache/htdocs/a.html) as follows :
    <p><a href="./10mb.pdf">pdf-test</font></a></p>
5. And ofcourse, create /opt/apache/htdocs/10mb.pdf file.
6. Start Apache with SSL capability, and access the URL
https://servername/a.html (Client browser was Win2K box/IE 5.5).
7. Right click on "pdf-test", and select the "Save as" tab. This should
bring up the "Save As" dialog box.
8. Don't do any thing - and you'll see a SEGV in
after about 20 secs.

Now, is this the expected behavior? I don't believe so. A closer
investigation seemed that mod_SSL had nothing to do with the core dump.
the way a aborted connection was handled.

The following patch seemed to resolve the core dump issue for me - but I
don't believe it's the correct fix. Can somebody please evaluate the
and let me know if it's okay? Also, I've not evaluated the side-effects
doing such a thing.
[I don't know what's the difference b/w hard timeout and soft timeout -
the sense where/how should it be used. It'd be great if somebody could
explain the difference]


$ cvs diff http_protocol.c
Index: http_protocol.c
RCS file: /home/cvspublic/apache-1.3/src/main/http_protocol.c,v
retrieving revision 1.325
diff -u -r1.325 http_protocol.c
--- http_protocol.c     9 Jul 2002 15:26:26 -0000       1.325
+++ http_protocol.c     4 Aug 2002 16:54:45 -0000
@@ -2362,7 +2362,7 @@
     if (length == 0)
         return 0;

-    ap_soft_timeout("send body", r);
+    ap_hard_timeout("send body", r);

     while (!r->connection->aborted) {
         if ((length > 0) && (total_bytes_sent + IOBUFSIZE) > length)

View raw message