Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Mime-Version: 1.0 (Apple Message framework v734)
In-Reply-To: <434A9867.9090609@rowe-clan.net>
References: <4349F143.5040701@apache.org>
 <7EFA5E93-F843-48BD-BEEF-EB3D0957DF8F@apache.org>
 <434A9867.9090609@rowe-clan.net>
Content-Type: text/plain; charset=UTF-8; delsp=yes; format=flowed
Message-Id: <39E0B1FA-40D1-4BF8-8477-D541800D966D@apache.org>
Content-Transfer-Encoding: quoted-printable
From: Sander Temme <sctemme@apache.org>
Subject: Re: [pre-release] 2.0.55 *candidate* available for testing
Date: Thu, 13 Oct 2005 11:11:31 -0700
To: dev@httpd.apache.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Oct 10, 2005, at 9:35 AM, William A. Rowe, Jr. wrote:

> Sander Temme wrote:
>
>> On Oct 9, 2005, at 9:42 PM, William A. Rowe, Jr. wrote:
>>
>>> The httpd-2.0.55 candidate, including win32 source .zip and  =20
>>> installers*,
>>>
>> As of 17:59 CEST (15 minutes ago), 2.0.55 is running on  =20
>> www.apache.org. Please report any anomalies.
>>
>
> Ack, starting clock with 72 hours to GA, contingent upon an absence
> of problem reports (specificially regressions).

Six more cores since the last update of mod_mbox. Then twenty more =20
appeared with exactly the same timestamp: probably some bot pounding =20
the site.

Quick story: all the cores I've analyzed are mod_mbox crashes. None =20
in other parts of httpd.

+1 for GA based on running for 72 hours on www.apache.org without =20
crashes in the distributed code.

S.

Brief analysis of some of the cores follows:

/raid1/httpd-cores/core.5885

#0  mbox_mime_decode_body (p=3D0x0, cte=3DCTE_NONE, body=3D0x0, len=3D0) =
at =20
mod_mbox_mime.c:290
#1  0x2000000001011110 in mbox_mime_get_body (p=3D0x60000000002509c8, =20=

m=3D0x6000000000063130) at mod_mbox_mime.c:299
#2  0x200000000100d2e0 in mbox_static_message (r=3D0x6000000000250a30, =20=

f=3D0x60000000001ed530) at mod_mbox_out.c:1151
#3  0x2000000001008ca0 in mbox_file_handler (r=3D0x6000000000250a30) at =20=

mod_mbox_file.c:231
#4  0x4000000000035f90 in ap_run_handler (r=3D0x6000000000250a30) at =20
config.c:153
#5  0x4000000000036f70 in ap_invoke_handler (r=3D0x6000000000250a30) at =20=

config.c:317
#6  0x400000000002fb00 in ap_process_request (r=3D0x6000000000250a30) =20=

at http_request.c:226
#7  0x4000000000024bf0 in ap_process_http_connection =20
(c=3D0x60000000001db350) at http_core.c:233
#8  0x400000000004db00 in ap_run_process_connection =20
(c=3D0x60000000001db350) at connection.c:43
#9  0x4000000000032910 in child_main (child_num_arg=3D27976) at =20
prefork.c:610
#10 0x4000000000032be0 in make_child (s=3D0x6000000000047788, slot=3D360) =
=20
at prefork.c:704
#11 0x4000000000033180 in perform_idle_server_maintenance (p=3D0x6) at =20=

prefork.c:839
#12 0x4000000000033fc0 in ap_mpm_run (_pconf=3D0x600000000000bc68, =20
plog=3D0x6000000000042298, s=3D0x0) at prefork.c:863
#13 0x4000000000041f60 in main (argc=3D2, argv=3D0x60000fffffffb3e8) at =20=

main.c:618

(gdb) print r->unparsed_uri
$2 =3D 0x6000000000251f00 "/mod_mbox/httpd-users/200310.mbox/%3CBAY2-=20
F103MOEYzk8TRA00006ddd@hotmail.com%3E"

/raid1/httpd-cores/core.28450

#0  get_base_uri (r=3D0x6000000000215748) at mod_mbox.c:197
#1  0x2000000001007a10 in get_base_path (r=3D0x6000000000215748) at =20
mod_mbox.c:178
#2  0x200000000100cfa0 in mbox_static_message (r=3D0x60000000002155d0, =20=

f=3D0x60000000001f87b8) at mod_mbox_out.c:1051
#3  0x2000000001008ca0 in mbox_file_handler (r=3D0x60000000002155d0) at =20=

mod_mbox_file.c:231
#4  0x4000000000035f90 in ap_run_handler (r=3D0x60000000002155d0) at =20
config.c:153
#5  0x4000000000036f70 in ap_invoke_handler (r=3D0x60000000002155d0) at =20=

config.c:317
#6  0x400000000002fb00 in ap_process_request (r=3D0x60000000002155d0) =20=

at http_request.c:226
#7  0x4000000000024bf0 in ap_process_http_connection =20
(c=3D0x60000000001db530) at http_core.c:233
#8  0x400000000004db00 in ap_run_process_connection =20
(c=3D0x60000000001db530) at connection.c:43
#9  0x4000000000032910 in child_main (child_num_arg=3D27976) at =20
prefork.c:610
#10 0x4000000000032be0 in make_child (s=3D0x6000000000047788, slot=3D29) =
=20
at prefork.c:704
#11 0x4000000000033180 in perform_idle_server_maintenance (p=3D0x1) at =20=

prefork.c:839
#12 0x4000000000033fc0 in ap_mpm_run (_pconf=3D0x0, =20
plog=3D0x6000000000042298, s=3D0x0) at prefork.c:863
#13 0x4000000000041f60 in main (argc=3D2, argv=3D0x60000fffffffb3e8) at =20=

main.c:618

(gdb) print r->unparsed_uri
$1 =3D 0x0
(gdb) print r->header_only
$3 =3D 1

/raid1/httpd-cores/core.19623

#0  get_base_uri (r=3D0x6000000000213778) at mod_mbox.c:197
#1  0x2000000001007a10 in get_base_path (r=3D0x6000000000213778) at =20
mod_mbox.c:178
#2  0x200000000100cfa0 in mbox_static_message (r=3D0x6000000000213600, =20=

f=3D0x6000000000224958) at mod_mbox_out.c:1051
#3  0x2000000001008ca0 in mbox_file_handler (r=3D0x6000000000213600) at =20=

mod_mbox_file.c:231
#4  0x4000000000035f90 in ap_run_handler (r=3D0x6000000000213600) at =20
config.c:153
#5  0x4000000000036f70 in ap_invoke_handler (r=3D0x6000000000213600) at =20=

config.c:317
#6  0x400000000002fb00 in ap_process_request (r=3D0x6000000000213600) =20=

at http_request.c:226
#7  0x4000000000024bf0 in ap_process_http_connection =20
(c=3D0x60000000001db530) at http_core.c:233
#8  0x400000000004db00 in ap_run_process_connection =20
(c=3D0x60000000001db530) at connection.c:43
#9  0x4000000000032910 in child_main (child_num_arg=3D27976) at =20
prefork.c:610
#10 0x4000000000032be0 in make_child (s=3D0x6000000000047788, slot=3D185) =
=20
at prefork.c:704
#11 0x4000000000033180 in perform_idle_server_maintenance (p=3D0x2) at =20=

prefork.c:839
#12 0x4000000000033fc0 in ap_mpm_run (_pconf=3D0x0, =20
plog=3D0x6000000000042298, s=3D0x0) at prefork.c:863
#13 0x4000000000041f60 in main (argc=3D2, argv=3D0x60000fffffffb3e8) at =20=

main.c:618

There are quite a few of these. Here's the full request_rec of this =20
particular one:

(gdb) print *r
$1 =3D {pool =3D 0x60000000002153a7, connection =3D 0x0, server =3D =20
0x6000000000213598, next =3D 0x6440073f170, prev =3D 0x1f800000001, main =
=20
=3D 0x13aa, the_request =3D 0x5a867f <Address 0x5a867f out of bounds>,
   assbackwards =3D 2065, proxyreq =3D 0, header_only =3D 1, protocol =3D =
=20
0x1fc20e <Address 0x1fc20e out of bounds>, proto_num =3D 0, hostname =3D =
=20
0x402f817f63900 <Address 0x402f817f63900 out of bounds>,
   request_time =3D 1123663468000000, status_line =3D 0x4028a48dc9280 =20=

<Address 0x4028a48dc9280 out of bounds>, status =3D 3932920, method =3D =20=

0x0, method_number =3D 0, allowed =3D 0, allowed_xmethods =3D 0x0,
   allowed_methods =3D 0x0, sent_bodyct =3D 0, bytes_sent =3D 0, mtime =3D=
 0, =20
chunked =3D 2182016, range =3D 0x0, clength =3D 0, remaining =3D 0, =20
read_length =3D 65536, read_body =3D 2, read_chunked =3D 0,
   expecting_100 =3D 2041752, headers_in =3D 0x6000000000214568, =20
headers_out =3D 0x60000000001f2738, err_headers_out =3D =20
0x6000000000200d58, subprocess_env =3D 0x6000000000214928, notes =3D =20
0x6000000000214950,
   content_type =3D 0x6000000000214928 "=EF=BF=BDn\001", handler =3D =
0x0, =20
content_encoding =3D 0x0, content_languages =3D 0x60000000002138b0, =20
vlist_validator =3D 0x6000000000213598 "=EF=BF=BD=EF=BF=BD\035",
   user =3D 0x8 <Address 0x8 out of bounds>, ap_auth_type =3D =20
0x2074636500000002 <Address 0x2074636500000002 out of bounds>, =20
no_cache =3D 2177232, no_local_copy =3D 1610612736, unparsed_uri =3D =
0x0, =20
uri =3D 0x0,
   filename =3D 0x6000000000213598 "=EF=BF=BD=EF=BF=BD\035", =
canonical_filename =3D =20
0x900000018 <Address 0x900000018 out of bounds>, path_info =3D =20
0x2020202000000019 <Address 0x2020202000000019 out of bounds>,
   args =3D 0x6000000000213a08 "", finfo =3D {pool =3D =
0x2e6174720024012a, =20
valid =3D 1, protection =3D 1865311592, filetype =3D APR_CHR, user =3D =20=

795178089, group =3D 8, inode =3D 1747857971,
     device =3D 8386658473162859858, nlink =3D 1919242272, size =3D =20
7598809965127562350, csize =3D 3414965976753469038, atime =3D =20
18949104999, mtime =3D 8675450682576495990, ctime =3D =
2314885856696991749,
     fname =3D 0x2f3a707474682020 <Address 0x2f3a707474682020 out of =20
bounds>, name =3D 0x617472616b616a2f <Address 0x617472616b616a2f out of =20=

bounds>, filehand =3D 0x2e6568636170612e}, parsed_uri =3D {
     scheme =3D 0x657469732f67726f <Address 0x657469732f67726f out of =20=

bounds>, hostinfo =3D 0x6f766e697465672f <Address 0x6f766e697465672f =20
out of bounds>,
     user =3D 0x6d74682e00000002 <Address 0x6d74682e00000002 out of =20
bounds>, password =3D 0x6572696400000003 <Address 0x6572696400000003 =20
out of bounds>,
     hostname =3D 0x616d726500000008 <Address 0x616d726500000008 out of =20=

bounds>, port_str =3D 0x746e656e <Address 0x746e656e out of bounds>,
     path =3D 0x65766c6f766e6974 <Address 0x65766c6f766e6974 out of =20
bounds>, query =3D 0x72617262696c2f64 <Address 0x72617262696c2f64 out =20=

of bounds>,
     fragment =3D 0x20206c6d74682e79 <Address 0x20206c6d74682e79 out of =20=

bounds>, hostent =3D 0x2020202020202020, port =3D 8224, is_initialized =3D=
 =20
0, dns_looked_up =3D 0, dns_resolved =3D 0},
   used_path_info =3D 1781477178, per_dir_config =3D 0x6863617000000007, =
=20
request_config =3D 0x69732f67726f2e65, htaccess =3D 0x617262696c2f6574, =20=

output_filters =3D 0xa6c6d74682e7972,
   input_filters =3D 0x7463657269646552, proto_output_filters =3D =20
0x656e616d72655020, proto_input_filters =3D 0x6000000000214c00, =20
eos_sent =3D 2182150}

Guess that's gonna look real good in YOUR mailer... note a lot of =20
garbage, and header_only is set. It's a HEAD request.

Couple more with the same issue. core.7456 broke ata different point:

#0  mbox_raw_message (r=3D0x6000000000238720, f=3D0x31) at =
mod_mbox_out.c:=20
966
#1  0x2000000001008cf0 in mbox_file_handler (r=3D0x6000000000238720) at =20=

mod_mbox_file.c:231
#2  0x4000000000035f90 in ap_run_handler (r=3D0x6000000000238720) at =20
config.c:153
#3  0x4000000000036f70 in ap_invoke_handler (r=3D0x6000000000238720) at =20=

config.c:317
#4  0x400000000002fb00 in ap_process_request (r=3D0x6000000000238720) =20=

at http_request.c:226
#5  0x4000000000024bf0 in ap_process_http_connection =20
(c=3D0x60000000001db530) at http_core.c:233
#6  0x400000000004db00 in ap_run_process_connection =20
(c=3D0x60000000001db530) at connection.c:43
#7  0x4000000000032910 in child_main (child_num_arg=3D27976) at =20
prefork.c:610
#8  0x4000000000032be0 in make_child (s=3D0x6000000000047788, slot=3D118) =
=20
at prefork.c:704
#9  0x4000000000033180 in perform_idle_server_maintenance (p=3D0x1) at =20=

prefork.c:839
#10 0x4000000000033fc0 in ap_mpm_run (_pconf=3D0x0, =20
plog=3D0x6000000000042298, s=3D0x0) at prefork.c:863
#11 0x4000000000041f60 in main (argc=3D2, argv=3D0x60000fffffffb3e8) at =20=

main.c:618

(gdb) print r->unparsed_uri
$2 =3D 0x6000000000239bf0 "/mod_mbox/ws-fx-dev/200501.mbox/raw/=20
<41DF306C.3050404@parasoft.com>/axis.html"

core.13402 breaks in the same place with the following request:

(gdb) print r->unparsed_uri
$2 =3D 0x60000000003554f0 "/mod_mbox/ws-axis-c-user/200412.mbox/raw/%=20
3CEAA42CA41CFA78419786AF09337DEBF804B43B1A@edmb003.edm-b.edm.dsh.de%=20
3E/%5C%5C%5C"

core.11704, same line, the following request:

(gdb) print r->unparsed_uri
$1 =3D 0x60000000002480f0 "/mod_mbox/ws-axis-c-user/200412.mbox/raw/%=20
3CEAA42CA41CFA78419786AF09337DEBF804B43B1A@edmb003.edm-b.edm.dsh.de%=20
3E/%5C%5C%5C"


Etc. etc.

- --
sander@temme.net              http://www.temme.net/sander/
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFDTqNXnjkrwtLH+RIRAtJ5AJ95uUxQsgWgmr/iJFp/Yzep5WZjngCfcmMx
gpilgLS9KUEVEIJ3dMFDEJE=3D
=3Dwg45
-----END PGP SIGNATURE-----