varnishncsa 3.0.0 crash

[Jean-Baptiste Quenot]

As the backtrace mentions SLT_ReqEnd, there must be a bug along those lines:

    case SLT_ReqEnd:
    {
        char ttfb[64];
        if (!lp->active)
            break;
        if (lp->df_ttfb != NULL || sscanf(ptr, "%*u %*u.%*u %ld.%*u
%*u.%*u %s", &l, ttfb) != 2) {
            clean_logline(lp);
            break;
        }
        lp->df_ttfb = strdup(ttfb);
        t = l;
        localtime_r(&t, &lp->df_t);
        /* got it all */
        lp->complete = 1;
        break;
    }

Removing %{Varnish:time_firstbyte}x from log format does not help,
still crashes.
-- 
Jean-Baptiste Quenot