[Varnish] #549: Crash on vertical tab

Varnish varnish-bugs at projects.linpro.no
Wed Sep 2 10:07:02 CEST 2009


#549: Crash on vertical tab
----------------------+-----------------------------------------------------
 Reporter:  kristian  |       Owner:  phk  
     Type:  defect    |      Status:  new  
 Priority:  normal    |   Milestone:       
Component:  varnishd  |     Version:  trunk
 Severity:  normal    |    Keywords:       
----------------------+-----------------------------------------------------
 To reproduce, set this as backend:

  echo -e 'HTTP/1.1 200 OK\v\r\n\r\nTest' | nc -l 8133
  (or whatever port)

 backtrace (no assert in trunk at the moment, due to sigseg-on-assert):
 {{{
 (gdb) bt full
 #0  0x00007ffe73938d06 in getframeaddr (level=<value optimized out>) at
 execinfo.c:324
 No locals.
 #1  0x00007ffe7393f1c8 in backtrace (buffer=<value optimized out>,
 size=10) at execinfo.c:65
         i = 2
 #2  0x0000000000422ae5 in pan_ic (func=<value optimized out>, file=<value
 optimized out>, line=<value optimized out>,
     cond=<value optimized out>, err=0, xxx=<value optimized out>) at
 cache_panic.c:273
         l = <value optimized out>
         p = <value optimized out>
         q = 0x0
         sp = <value optimized out>
 #3  0x000000000042129d in http_DissectResponse (w=0x7ffdb0865400,
 htc=<value optimized out>, hp=0x7ffdb0865b78) at cache.h:710
         i = 503
         __func__ = "http_DissectResponse"
 #4  0x000000000041a86d in FetchHdr (sp=0x7ffe6a108008) at
 cache_fetch.c:392
         w = <value optimized out>
         b = 0x7ffe6a10886d "localhost:8081"
         hp = <value optimized out>
         i = 1
         __func__ = "FetchHdr"
 #5  0x0000000000412566 in cnt_fetch (sp=0x7ffe6a108008) at
 cache_center.c:423
         i = <value optimized out>
         transient = <value optimized out>
         hp = <value optimized out>
         hp2 = <value optimized out>
         b = <value optimized out>
         handling = <value optimized out>
         __func__ = "cnt_fetch"
 #6  0x0000000000413ca5 in CNT_Session (sp=0x7ffe6a108008) at steps.h:41
         done = 0
         w = (struct worker *) 0x7ffdb0865400
         __func__ = "CNT_Session"
 #7  0x00000000004240e3 in wrk_do_cnt_sess (w=0x7ffdb0865400, priv=<value
 optimized out>) at cache_pool.c:281
         sess = (struct sess *) 0x7ffe6a108008
         __func__ = "wrk_do_cnt_sess"
 #8  0x0000000000424416 in wrk_thread_real (qp=0x7ffe729200b0,
 shm_workspace=<value optimized out>, sess_workspace=16384)
     at cache_pool.c:176
         ww = {magic = 1670491599, nobjhead = 0x0, nobjcore = 0x0, stats =
 0x7ffdb08653f0, lastused = 1251878643.4236326, cond = {
     __data = {__lock = 0, __futex = 2, __total_seq = 1, __wakeup_seq = 1,
 __woken_seq = 1, __mutex = 0x7ffe72924348, __nwaiters = 0,
       __broadcast_seq = 0},
     __size =
 "\000\000\000\000\002\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000HC\222rþ\177\000\000\000\000\000\000\000\000\000",
 __align = 8589934592}, list = {vtqe_next = 0x7ffdb1066400,
 ---Type <return> to continue, or q <return> to quit---
     vtqe_prev = 0x7ffe729200c0}, wrq = 0x7ffe6a108198, wfd = 0x0, werr =
 0, iov = {{iov_base = 0x7ffe6a108828, iov_len = 3}, {
       iov_base = 0x44a824, iov_len = 1}, {iov_base = 0x7ffe6a10882c,
 iov_len = 1}, {iov_base = 0x44a824, iov_len = 1}, {
       iov_base = 0x449a7b, iov_len = 8}, {iov_base = 0x448ada, iov_len =
 2}, {iov_base = 0x7ffe6a108867, iov_len = 20}, {
       iov_base = 0x448ada, iov_len = 2}, {iov_base = 0x7ffe6a10887d,
 iov_len = 47}, {iov_base = 0x448ada, iov_len = 2}, {
       iov_base = 0x7ffdb085f3b0, iov_len = 21}, {iov_base = 0x448ada,
 iov_len = 2}, {iov_base = 0x7ffdb085f3c6, iov_len = 26}, {
       iov_base = 0x448ada, iov_len = 2}, {iov_base = 0x448ada, iov_len =
 2}, {iov_base = 0x0, iov_len = 0} <repeats 49 times>}, niov = 0,
   liov = 0, vcl = 0x0, wlb = 0x7ffdb08633c0 "\r", wlp = 0x7ffdb08633da "",
 wle = 0x7ffdb08653c0 "", wlr = 1, sha256ctx = 0x7ffdb0866070,
   htc = {{magic = 1041886673, fd = 13, ws = 0x7ffdb08658f0, rxbuf = {b =
 0x7ffdb085f3e1 "HTTP/1.1 200 OK\v\r\n\r\nTest\n",
         e = 0x7ffdb085f3f5 "Test\n"}, pipeline = {b = 0x7ffdb085f3f5
 "Test\n", e = 0x7ffdb085f3fa ""}}}, ws = {{magic = 905626964,
       id = 0x44a992 "wrk", s = 0x7ffdb085f3b0 "X-Varnish: 1792453121", f =
 0x7ffdb085f3fa "", r = 0x0, e = 0x7ffdb08633b0 "",
       overflow = 0}}, http = {{magic = 1680389577, ws = 0x7ffdb08658f0,
 conds = 0 '\0', logtag = HTTP_Tx, status = 0, protover = 0, hd = {
         {b = 0x7ffe6a108828 "GET", e = 0x7ffe6a10882b ""}, {b =
 0x7ffe6a10882c "/", e = 0x7ffe6a10882d ""}, {b = 0x449a7b "HTTP/1.1",
           e = 0x449a83 ""}, {b = 0x0, e = 0x0}, {b = 0x0, e = 0x0}, {b =
 0x7ffe6a108867 "Host: localhost:8081", e = 0x7ffe6a10887b ""}, {
           b = 0x7ffe6a10887d "User-Agent: lwp-request/5.818 libwww-
 perl/5.820", e = 0x7ffe6a1088ac ""}, {
           b = 0x7ffdb085f3b0 "X-Varnish: 1792453121", e = 0x7ffdb085f3c5
 ""}, {b = 0x7ffdb085f3c6 "X-Forwarded-For: 127.0.0.1",
           e = 0x7ffdb085f3e0 ""}, {b = 0x0, e = 0x0} <repeats 23 times>},
 hdf = '\0' <repeats 31 times>, nhd = 9}, {magic = 1680389577,
       ws = 0x7ffdb08658f0, conds = 0 '\0', logtag = HTTP_Rx, status = 503,
 protover = 0, hd = {{b = 0x0, e = 0x0}, {b = 0x0, e = 0x0}, {
           b = 0x7ffdb085f3e1 "HTTP/1.1 200 OK\v\r\n\r\nTest\n", e =
 0x7ffdb085f3e9 " 200 OK\v\r\n\r\nTest\n"}, {
           b = 0x7ffdb085f3ea "200 OK\v\r\n\r\nTest\n", e = 0x7ffdb085f3ed
 " OK\v\r\n\r\nTest\n"}, {
           b = 0x7ffdb085f3ee "OK\v\r\n\r\nTest\n", e = 0x0}, {b = 0x0, e =
 0x0} <repeats 27 times>}, hdf = '\0' <repeats 31 times>,
       nhd = 5}, {magic = 0, ws = 0x0, conds = 0 '\0', logtag = 0, status =
 0, protover = 0, hd = {{b = 0x0, e = 0x0} <repeats 32 times>},
       hdf = '\0' <repeats 31 times>, nhd = 0}}, bereq = 0x7ffdb0865928,
 beresp1 = 0x0, beresp = 0x7ffdb0865b78, resp = 0x0,
   cacheable = 0, age = 0, entered = 0, ttl = 0, grace = 0, do_esi = 0}
         sha256 = {state = {0, 0, 0, 0, 0, 0, 0, 0}, count = 0, buf = '\0'
 <repeats 63 times>}
         stats = {n_object = 0, n_objecthead = 1}
         stats_clean = 1
         __func__ = "wrk_thread_real"
 #9  0x00007ffe733013ba in start_thread () from /lib/libpthread.so.0
 No symbol table info available.
 #10 0x00007ffe72bcefcd in clone () from /lib/libc.so.6
 No symbol table info available.
 #11 0x0000000000000000 in ?? ()
 No symbol table info available.
 }}}

 Confirmed on trunk and 2.0.4

-- 
Ticket URL: <http://varnish.projects.linpro.no/ticket/549>
Varnish <http://varnish.projects.linpro.no/>
The Varnish HTTP Accelerator


More information about the varnish-bugs mailing list