[Varnish] #903: Segmentation fault in varnish 3b4859455803b606107c07b25b784372d5665a1f

[Varnish]

#903: Segmentation fault in varnish 3b4859455803b606107c07b25b784372d5665a1f
--------------------+-------------------------------------------------------
 Reporter:  kdajka  |        Type:  defect  
   Status:  new     |    Priority:  normal  
Milestone:          |   Component:  varnishd
  Version:  trunk   |    Severity:  blocker 
 Keywords:          |  
--------------------+-------------------------------------------------------
 Hi, I'm seeing segmentation fault in trunk
 3b4859455803b606107c07b25b784372d5665a1f.

 {{{
 /usr/local/inp/varnish/sbin/varnishd -P /var/tmp/foo.bar_varnishd.pid -a
 193.42.231.45:8084 -i foo.bar_varnishic06 -n foo.bar_varnishic06 -f
 /exp/config/varnish//foo.bar/foo.bar.vcl -T 193.42.231.45:2084 -h
 classic,20011 -p thread_pools=4 -p ban_lurker_sleep=0.1 -w 200,4000,2 -t 0
 -s malloc,3G -d
 }}}

 {{{
 $file
 /usr/local/inp/varnish_3b4859455803b606107c07b25b784372d5665a1f_debug/sbin/varnishd:
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked
 (uses shared libs), for GNU/Linux 2.6.8, not stripped
 }}}



 {{{
 $ ulimit -c
 unlimited
 }}}

 {{{
 $ gdb -c
 /usr/local/inp/varnish_3b4859455803b606107c07b25b784372d5665a1f_debug/var/varnish/foo.bar_varnishic06/core.20615
 /usr/local/inp/varnish_3b4859455803b606107c07b25b784372d5665a1f_debug/sbin/varnishd

 ...
 Program terminated with signal 11, Segmentation fault.
 ...
 (gdb) bt
 #0  0x0000000000418298 in cnt_error (sp=0x7f350ab68008) at
 cache_center.c:420
 #1  0x000000000041be90 in CNT_Session (sp=0x7f350ab68008) at steps.h:47
 #2  0x0000000000436853 in wrk_do_cnt_sess (w=0x7f3581082e10,
 priv=0x7f350ab68008) at cache_pool.c:303
 #3  0x00000000004360be in wrk_thread_real (qp=0x7f3670d0e290,
 shm_workspace=8192, sess_workspace=65536, nhttp=64, http_space=1160,
 siov=128)
     at cache_pool.c:187
 #4  0x00000000004364bf in wrk_thread (priv=0x7f3670d0e290) at
 cache_pool.c:233
 #5  0x00007f36715a0fc7 in start_thread () from /lib/libpthread.so.0
 #6  0x00007f367131664d in clone () from /lib/libc.so.6
 #7  0x0000000000000000 in ?? ()
 (gdb) print *sp
 $1 = {magic = 741317722, fd = 172, id = 172, xid = 1580802727, restarts =
 0, esi_level = 0, disable_esi = 0, hash_ignore_busy = 0 '\0',
   hash_always_miss = 0 '\0', wrk = 0x7f3581082e10, sockaddrlen = 16,
 mysockaddrlen = 128, sockaddr = 0x7f350ab682e0, mysockaddr =
 0x7f350ab68360,
   mylsock = 0x7f3670d20eb0, addr = 0x7f350ab68cf0 "188.165.144.187", port
 = 0x7f350ab68d00 "48411", client_identity = 0x0,
   doclose = 0x4707b9 "not HTTP/1.1", http = 0x7f350ab683e0, http0 =
 0x7f350ab68868, ws = {{magic = 905626964, id = 0x47215e "sess",
       s = 0x7f350ab68cf0 "188.165.144.187", f = 0x7f350ab68e10 "te", r =
 0x0, e = 0x7f350ab78cf0 "", overflow = 0}}, ws_ses = 0x7f350ab68d08 "GET",
   ws_req = 0x7f350ab68dd8 "188.165.144.187", digest = "\025\001W�b
 �\2241�\203��I�6���\022\225i\226\t\027�\206q|��i", htc = {{magic =
 1041886673,
       fd = 172, maxbytes = 32768, maxhdr = 2048, ws = 0x7f350ab68080,
 rxbuf = {b = 0x7f350ab68d08 "GET", e = 0x7f350ab68dd3 ""}, pipeline = {
         b = 0x0, e = 0x0}}}, t_open = 1302868999.9459498, t_req =
 1302868999.9459774, t_resp = nan(0x8000000000000), t_end =
 1302868999.9459498,
   exp = {ttl = -1, grace = 30, keep = -1}, step = STP_ERROR, cur_method =
 0, handling = 1, sendbody = 1 '\001', wantbody = 1 '\001',
   err_code = 503, err_reason = 0x0, list = {vtqe_next = 0x0, vtqe_prev =
 0x0}, director = 0x0, vbc = 0x0, obj = 0x0, objcore = 0x0,
   vcl = 0x7f3670d065e8, hash_objhead = 0x0, mem = 0x7f350ab68000, workreq
 = {list = {vtqe_next = 0x0, vtqe_prev = 0x0},
     func = 0x436729 <wrk_do_cnt_sess>, priv = 0x7f350ab68008}, acct_tmp =
 {first = 0, sess = 1, req = 1, pipe = 0, pass = 1, fetch = 0,
     hdrbytes = 0, bodybytes = 0}, acct_req = {first = 0, sess = 0, req =
 0, pipe = 0, pass = 0, fetch = 0, hdrbytes = 0, bodybytes = 0},
   acct_ses = {first = 1302868999.9459498, sess = 0, req = 0, pipe = 0,
 pass = 0, fetch = 0, hdrbytes = 0, bodybytes = 0}, ev = {events = 0, data
 = {
       ptr = 0x0, fd = 0, u32 = 0, u64 = 0}}}

 }}}

-- 
Ticket URL: <http://www.varnish-cache.org/trac/ticket/903>
Varnish <http://varnish-cache.org/>
The Varnish HTTP Accelerator