[Varnish] #944: varnishncsa crash

[Varnish]

#944: varnishncsa crash
-------------------------+--------------------------------------------------
 Reporter:  191919       |       Owner:  tfheen           
     Type:  defect       |      Status:  new              
 Priority:  high         |   Milestone:                   
Component:  varnishncsa  |     Version:  3.0.0            
 Severity:  critical     |    Keywords:  varnishncsa crash
-------------------------+--------------------------------------------------
Description changed by tfheen:

Old description:

> varnishncsa crashes when logging hitmiss information
>
> (gdb) r -F "%h %l %u %t "%r" %s %b \"%{Referer}i\" \"%{User-agent}i\"
> %{Varnish:hitmiss}x %{Varnish:handling}x" -w 111
> Starting program: /root/varnish-3.0.0/bin/varnishncsa/.libs/varnishncsa
> -F "%h %l %u %t "%r" %s %b \"%{Referer}i\" \"%{User-agent}i\"
> %{Varnish:hitmiss}x %{Varnish:handling}x" -w 111
> warning: no loadable sections found in added symbol-file system-supplied
> DSO at 0x2aaaaaaab000
> [Thread debugging using libthread_db enabled]
>
> Program received signal SIGSEGV, Segmentation fault.
> 0x0000003eddc79b80 in strlen () from /lib64/libc.so.6
> (gdb) where
> #0  0x0000003eddc79b80 in strlen () from /lib64/libc.so.6
> #1  0x0000003eddc61bce in fputs () from /lib64/libc.so.6
> #2  0x0000000000403075 in h_ncsa (priv=0x606be0, tag=SLT_ReqEnd, fd=66,
> len=88, spec=1,
>     ptr=0x2aaaad408c00 "1160660892 1308816831.106726885
> 1308816831.106859922 0.761338949 0.000108004 0.000025034\005", bitmap=0)
> at varnishncsa.c:657
> #3  0x00002aaaaaccf241 in VSL_Dispatch () from
> /usr/lib64/libvarnishapi.so.1
> #4  0x0000000000403577 in main (argc=5, argv=0x7fffffffe938) at
> varnishncsa.c:817
> (gdb) print lp
> No symbol "lp" in current context.
> (gdb) frame 2
> #2  0x0000000000403075 in h_ncsa (priv=0x606be0, tag=SLT_ReqEnd, fd=66,
> len=88, spec=1, ptr=0x2aaaad408c00 "omid=178993267cn\b", bitmap=0) at
> varnishncsa.c:657
> 657                                             fprintf(fo, "%s",
> lp->df_hitmiss);
> (gdb) print lp
> $1 = (struct logline *) 0x6090b0
> (gdb) print lp->df_hitmiss
> $2 = 0x0
>
> lp->df_hitmiss is initialized but not filled.

New description:

 varnishncsa crashes when logging hitmiss information
 {{{
 (gdb) r -F "%h %l %u %t "%r" %s %b \"%{Referer}i\" \"%{User-agent}i\"
 %{Varnish:hitmiss}x %{Varnish:handling}x" -w 111
 Starting program: /root/varnish-3.0.0/bin/varnishncsa/.libs/varnishncsa -F
 "%h %l %u %t "%r" %s %b \"%{Referer}i\" \"%{User-agent}i\"
 %{Varnish:hitmiss}x %{Varnish:handling}x" -w 111
 warning: no loadable sections found in added symbol-file system-supplied
 DSO at 0x2aaaaaaab000
 [Thread debugging using libthread_db enabled]

 Program received signal SIGSEGV, Segmentation fault.
 0x0000003eddc79b80 in strlen () from /lib64/libc.so.6
 (gdb) where
 #0  0x0000003eddc79b80 in strlen () from /lib64/libc.so.6
 #1  0x0000003eddc61bce in fputs () from /lib64/libc.so.6
 #2  0x0000000000403075 in h_ncsa (priv=0x606be0, tag=SLT_ReqEnd, fd=66,
 len=88, spec=1,
     ptr=0x2aaaad408c00 "1160660892 1308816831.106726885
 1308816831.106859922 0.761338949 0.000108004 0.000025034\005", bitmap=0)
 at varnishncsa.c:657
 #3  0x00002aaaaaccf241 in VSL_Dispatch () from
 /usr/lib64/libvarnishapi.so.1
 #4  0x0000000000403577 in main (argc=5, argv=0x7fffffffe938) at
 varnishncsa.c:817
 (gdb) print lp
 No symbol "lp" in current context.
 (gdb) frame 2
 #2  0x0000000000403075 in h_ncsa (priv=0x606be0, tag=SLT_ReqEnd, fd=66,
 len=88, spec=1, ptr=0x2aaaad408c00 "omid=178993267cn\b", bitmap=0) at
 varnishncsa.c:657
 657                                             fprintf(fo, "%s",
 lp->df_hitmiss);
 (gdb) print lp
 $1 = (struct logline *) 0x6090b0
 (gdb) print lp->df_hitmiss
 $2 = 0x0
 }}}
 lp->df_hitmiss is initialized but not filled.

--

-- 
Ticket URL: <http://www.varnish-cache.org/trac/ticket/944#comment:2>
Varnish <http://varnish-cache.org/>
The Varnish HTTP Accelerator