nginx-0.8.53 segfault

[Maxim Dounin]

Hello!

On Thu, Jan 13, 2011 at 08:16:52PM +0100, Maxim C. wrote:

> My nginx.conf is in attachment, i read http://wiki.nginx.org/Debugging 
> but i can't provide debug backtrace, my gdb outputs following:

[...]

> Reading symbols from /usr/sbin/nginx...(no debugging symbols 
> found)...done.

Your nginx binary is stripped, you have to make sure no strip(1) 
is run during install process (and no "-s" argument for 
install(1) is used).

> BFD: Предупреждение: /var/spool/nginx/cores/core усечён: ожидался размер 
> ядра файла >= 2099683328, найдено: 524439552.

Resulting core is huge, most likely due to

        proxy_cache_path  /var/spool/nginx  levels=1:2   keys_zone=one:1000m;
        proxy_cache_path /var/spool/nginx-preview levels=1:2 keys_zone=image-preview:1000m;

in your config.  1000M for cache keys is a bit too many, it has 
space for 16mln keys (64 bytes per key on 32bit platforms).  I 
doubt you have so many requests per 10 min (default inactive 
timeout you haven't changed).  You may want to reduce key zone 
size to something reasonable (something like 10M is enough in most 
cases).

Alternatively, set worker_rlimit_core big enough (i.e. larger than 
your nginx process size).

[...]

> Linux kernel i'm using has chpax and grsec patches, if it helps.
> 
> # nginx -V
> nginx version: nginx/0.8.53
> TLS SNI support enabled
> configure arguments: --prefix=/usr --sbin-path=/usr/sbin/nginx 
> --conf-path=/etc/nginx/nginx.conf 
> --error-log-path=/var/log/nginx/error_log --pid-path=/var/run/nginx.pid 
> --lock-path=/var/lock/nginx.lock --user=nginx --group=nginx 
> --with-cc-opt=-I/usr/include --with-ld-opt=-L/usr/lib 
> --http-log-path=/var/log/nginx/access_log 
> --http-client-body-temp-path=/var/tmp/nginx/client 
> --http-proxy-temp-path=/var/tmp/nginx/proxy 
> --http-fastcgi-temp-path=/var/tmp/nginx/fastcgi 
> --http-scgi-temp-path=/var/tmp/nginx/scgi 
> --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi --with-debug --with-pcre 
> --without-http_autoindex_module --without-http_browser_module 
> --without-http_charset_module --without-http_map_module 
> --without-http_memcached_module --without-http_scgi_module 
> --without-http_ssi_module --without-http_split_clients_module 
> --without-http_upstream_ip_hash_module --without-http_userid_module 
> --without-http_uwsgi_module --with-http_dav_module 
> --with-http_degradation_module --with-http_flv_module 
> --with-http_image_filter_module --with-http_stub_status_module 
> --with-http_realip_module --with-http_ssl_module 
> --without-mail_imap_module --without-mail_pop3_module 
> --without-mail_smtp_module
> 
> Attachments:
> http://www.ruby-forum.com/attachment/5736/nginx.conf

See no obvious problems.

Maxim Dounin