nginx 0.8.45-0.8.49 segfault bug

[Maxim Dounin]

Hello!

On Wed, Sep 01, 2010 at 10:11:31AM -0400, zhijianpeng wrote:

> Maxim Dounin Wrote:
> -------------------------------------------------------
> > Hello!
> > 
> > On Wed, Sep 01, 2010 at 07:59:54AM -0400,
> > zhijianpeng wrote:
> > 
> > > url may cause nginx work process crash
> > > the code in
> > src/http/ngx_http_request.c:ngx_http_free_request
> > > r->upstream may be a NULL pointer
> > > 
> > > 
> > > #0  0x000000000042b368 in ngx_http_free_request
> > (r=0x13b60c20, rc=0) at
> > > src/http/ngx_http_request.c:2951
> > > 2951        switch (r->upstream->cache_status) {
> > 
> > There is no such code in nginx 0.8.49.  Looks like
> > you are 
> > running with some third-party or local patches.
> 
> It is the code of 0.8.47,and i have no third-party or local patches

There is no such code in 0.8.47 either.  Line 2951 in 
ngx_http_request.c as of 0.8.47 looks like:

    if (rc > 0 && (r->headers_out.status == 0 || r->connection->sent == 0)) {

and there is no "switch (r->upstream->cache_status)" statement in 
the whole nginx source code (and never been, in all versions).

Maxim Dounin