Weird behavior on SSL, and corruption on reload

Maxim Dounin mdounin at mdounin.ru
Sun Sep 25 11:01:13 UTC 2011


Hello!

On Sun, Sep 25, 2011 at 05:13:54AM -0400, orensol wrote:

> Hello,
> 
> I had a weird behavior in nginx, in which SSL connections were suddenly
> denied. It happened with no apparent reason. A reload of nginx seemed to
> have solved it, but on reload, error.log had this stack trace:
> 
> *** glibc detected *** nginx: worker process is shutting down: double
> free or corruption (out): 0x080ca518 ***
> ======= Backtrace: =========
> /lib/i686/nosegneg/libc.so.6[0xb7d0ccfd]
> /lib/i686/nosegneg/libc.so.6(cfree+0x90)[0xb7d103b0]
> /lib/libcrypto.so.6(CRYPTO_free+0x3a)[0xb7e3046a]
> /lib/libcrypto.so.6(BN_free+0x68)[0xb7e5a1d8]
> /lib/libcrypto.so.6(BN_MONT_CTX_free+0x29)[0xb7e63d99]
> /lib/libcrypto.so.6[0xb7e683e9]
> /lib/libcrypto.so.6(RSA_free+0x61)[0xb7e6afc1]
> /lib/libcrypto.so.6[0xb7e8cacd]
> /lib/libcrypto.so.6(EVP_PKEY_free+0x67)[0xb7e8cb47]
> /lib/libssl.so.6(ssl_cert_free+0xa0)[0xb7f5e5c0]
> /lib/libssl.so.6(SSL_CTX_free+0xe3)[0xb7f5bb73]
> nginx: worker process is shutting down[0x8066bbb]
> nginx: worker process is shutting down[0x804d1d0]
> nginx: worker process is shutting down[0x80645fe]
> nginx: worker process is shutting down[0x80646eb]
> nginx: worker process is shutting down[0x8062ff1]
> nginx: worker process is shutting down[0x8064f2c]
> nginx: worker process is shutting down[0x804c891]
> /lib/i686/nosegneg/libc.so.6(__libc_start_main+0xdc)[0xb7cbbdec]
> nginx: worker process is shutting down[0x804b141]

[...]

> 2011/09/25 05:01:43 [alert] 21233#0: worker process 1870 exited on
> signal 6
> 
> 
> Any ideas on what happened, and what can be done to prevent it in the
> future?

Are you able to reproduce the problem?  If yes, please follow 
instructions here:

http://wiki.nginx.org/Debugging

At least proper backtrace is needed to debug this further.  And 
you may need to make sure your nginx binary isn't stripped.

If not, please at least provide "nginx -V" output, config and 
OpenSSL version details (output of "openssl version -a").

Maxim Dounin



More information about the nginx mailing list