[Varnish] #944: varnishncsa crash

[Varnish]

#944: varnishncsa crash
-------------------------------+--------------------------------------------
 Reporter:  191919             |        Type:  defect     
   Status:  new                |    Priority:  high       
Milestone:                     |   Component:  varnishncsa
  Version:  3.0.0              |    Severity:  critical   
 Keywords:  varnishncsa crash  |  
-------------------------------+--------------------------------------------
 varnishncsa crashes when logging hitmiss information

 (gdb) r -F "%h %l %u %t "%r" %s %b \"%{Referer}i\" \"%{User-agent}i\"
 %{Varnish:hitmiss}x %{Varnish:handling}x" -w 111
 Starting program: /root/varnish-3.0.0/bin/varnishncsa/.libs/varnishncsa -F
 "%h %l %u %t "%r" %s %b \"%{Referer}i\" \"%{User-agent}i\"
 %{Varnish:hitmiss}x %{Varnish:handling}x" -w 111
 warning: no loadable sections found in added symbol-file system-supplied
 DSO at 0x2aaaaaaab000
 [Thread debugging using libthread_db enabled]

 Program received signal SIGSEGV, Segmentation fault.
 0x0000003eddc79b80 in strlen () from /lib64/libc.so.6
 (gdb) where
 #0  0x0000003eddc79b80 in strlen () from /lib64/libc.so.6
 #1  0x0000003eddc61bce in fputs () from /lib64/libc.so.6
 #2  0x0000000000403075 in h_ncsa (priv=0x606be0, tag=SLT_ReqEnd, fd=66,
 len=88, spec=1,
     ptr=0x2aaaad408c00 "1160660892 1308816831.106726885
 1308816831.106859922 0.761338949 0.000108004 0.000025034\005", bitmap=0)
 at varnishncsa.c:657
 #3  0x00002aaaaaccf241 in VSL_Dispatch () from
 /usr/lib64/libvarnishapi.so.1
 #4  0x0000000000403577 in main (argc=5, argv=0x7fffffffe938) at
 varnishncsa.c:817
 (gdb) print lp
 No symbol "lp" in current context.
 (gdb) frame 2
 #2  0x0000000000403075 in h_ncsa (priv=0x606be0, tag=SLT_ReqEnd, fd=66,
 len=88, spec=1, ptr=0x2aaaad408c00 "omid=178993267cn\b", bitmap=0) at
 varnishncsa.c:657
 657                                             fprintf(fo, "%s",
 lp->df_hitmiss);
 (gdb) print lp
 $1 = (struct logline *) 0x6090b0
 (gdb) print lp->df_hitmiss
 $2 = 0x0

 lp->df_hitmiss is initialized but not filled.

-- 
Ticket URL: <http://www.varnish-cache.org/trac/ticket/944>
Varnish <http://varnish-cache.org/>
The Varnish HTTP Accelerator