Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (hermes.apache.org: domain of jorton@redhat.com designates
 66.187.233.31 as permitted sender)
Date: Mon, 27 Sep 2004 15:07:54 +0100
From: Joe Orton <jorton@redhat.com>
To: dev@httpd.apache.org
Subject: Re: segfault ap_save_brigage in the latest 2.0
Message-ID: <20040927140754.GA15150@redhat.com>
Mail-Followup-To: dev@httpd.apache.org
References: <41575494.3010502@stason.org> <20040927061155.GA10865@redhat.com>
 <41580781.7040403@stason.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <41580781.7040403@stason.org>
User-Agent: Mutt/1.4.1i

On Mon, Sep 27, 2004 at 08:28:49AM -0400, Stas Bekman wrote:
> Yup, I can reliably (90% of runs) reproduce that with prefork mpm by 
> running this sequence:
> t/TEST t/filter/out_str_reverse.t t/apr/table.t t/filter/out_str_req_mix.t 
> t/api/sub_request.t t/api/aplog.t t/modperl/merge.t

Do you know when this started failing?  It appears to be unrelated to my
ap_save_brigade change, since it fails just the same with that reverted. 
It looks like memory corruption: I tried those tests against a server
built using --enable-pool-debug but then mod_perl will rarely start up,
segfaulting in:

#0  0x0000002a95d2f2c2 in find_entry (ht=0x8, key=0x2a9eead7f6, klen=-1, val=0x0)
    at tables/apr_hash.c:253
253         hash = ht->hash_func(key, &klen);
#0  0x0000002a95d2f2c2 in find_entry (ht=0x8, key=0x2a9eead7f6, klen=-1, val=0x0)
    at tables/apr_hash.c:253
#1  0x0000002a95d2f45b in apr_hash_get (ht=0x2a9eead7f6, key=0x7fbfff8ac8, klen=-1)
    at tables/apr_hash.c:319
#2  0x0000002a95d36518 in apr_pool_userdata_get (data=0x7fbfff8b30,    key=0x2a9eead7f6 "APR::Pool::new", pool=0x573d40)
    at memory/unix/apr_pools.c:1864
#3  0x0000002a9eeac786 in mpxs_apr_pool_DESTROY (my_perl=0x2a9eead7f6, obj=0x7fbfff8ac8)
    at APR__Pool.h:352
#4  0x0000002a9eead34c in XS_APR__Pool_DESTROY (my_perl=0x7e2b30, cv=0x7fbfff8ac8)
    at Pool.xs:119
#5  0x0000002a966c2358 in Perl_pp_entersub (my_perl=0x7e2b30)
    at pp_hot.c:2781
#6  0x0000002a96668154 in S_call_body (my_perl=0x7e2b30, myop=0x7fbfff8ac8, is_eval=-1)
    at perl.c:2066

etc at http://www.apache.org/~jorton/startup.perl

when it did start up it would segfault consistently when running the
tests you reference like:

#0  pool_clear_debug (pool=0x441, file_line=0x2a95d3fc19 "undefined")
    at memory/unix/apr_pools.c:1341
1341	    while (pool->child)
#0  pool_clear_debug (pool=0x441, file_line=0x2a95d3fc19 "undefined")
    at memory/unix/apr_pools.c:1341
#1  0x0000002a95d35db4 in apr_pool_destroy_debug (pool=0x441, 
    file_line=0x2a95d3fc19 "undefined") at memory/unix/apr_pools.c:1426
#2  0x0000002a95d35ce6 in pool_clear_debug (pool=0x1a223c0, 
file_line=0x2a95d3fc19 "undefined")
    at memory/unix/apr_pools.c:1342
#3  0x0000002a95d35db4 in apr_pool_destroy_debug (pool=0x1a223c0, 
    file_line=0x2a95d3fc19 "undefined") at memory/unix/apr_pools.c:1426
#4  0x0000002a95d369b0 in apr_pool_destroy (pool=0x441) at 
memory/unix/apr_pools.c:2206
#5  0x0000002a9e1fb8ff in XS_Apache__SubRequest_DESTROY 
(my_perl=0x2525420, cv=0x1844ff0)
    at SubRequest.xs:36

etc at http://www.apache.org/~jorton/pool.debug