Weird behavior on SSL, and corruption on reload
Maxim Dounin
mdounin at mdounin.ru
Sun Sep 25 11:01:13 UTC 2011
Hello!
On Sun, Sep 25, 2011 at 05:13:54AM -0400, orensol wrote:
> Hello,
>
> I had a weird behavior in nginx, in which SSL connections were suddenly
> denied. It happened with no apparent reason. A reload of nginx seemed to
> have solved it, but on reload, error.log had this stack trace:
>
> *** glibc detected *** nginx: worker process is shutting down: double
> free or corruption (out): 0x080ca518 ***
> ======= Backtrace: =========
> /lib/i686/nosegneg/libc.so.6[0xb7d0ccfd]
> /lib/i686/nosegneg/libc.so.6(cfree+0x90)[0xb7d103b0]
> /lib/libcrypto.so.6(CRYPTO_free+0x3a)[0xb7e3046a]
> /lib/libcrypto.so.6(BN_free+0x68)[0xb7e5a1d8]
> /lib/libcrypto.so.6(BN_MONT_CTX_free+0x29)[0xb7e63d99]
> /lib/libcrypto.so.6[0xb7e683e9]
> /lib/libcrypto.so.6(RSA_free+0x61)[0xb7e6afc1]
> /lib/libcrypto.so.6[0xb7e8cacd]
> /lib/libcrypto.so.6(EVP_PKEY_free+0x67)[0xb7e8cb47]
> /lib/libssl.so.6(ssl_cert_free+0xa0)[0xb7f5e5c0]
> /lib/libssl.so.6(SSL_CTX_free+0xe3)[0xb7f5bb73]
> nginx: worker process is shutting down[0x8066bbb]
> nginx: worker process is shutting down[0x804d1d0]
> nginx: worker process is shutting down[0x80645fe]
> nginx: worker process is shutting down[0x80646eb]
> nginx: worker process is shutting down[0x8062ff1]
> nginx: worker process is shutting down[0x8064f2c]
> nginx: worker process is shutting down[0x804c891]
> /lib/i686/nosegneg/libc.so.6(__libc_start_main+0xdc)[0xb7cbbdec]
> nginx: worker process is shutting down[0x804b141]
[...]
> 2011/09/25 05:01:43 [alert] 21233#0: worker process 1870 exited on
> signal 6
>
>
> Any ideas on what happened, and what can be done to prevent it in the
> future?
Are you able to reproduce the problem? If yes, please follow
instructions here:
http://wiki.nginx.org/Debugging
At least proper backtrace is needed to debug this further. And
you may need to make sure your nginx binary isn't stripped.
If not, please at least provide "nginx -V" output, config and
OpenSSL version details (output of "openssl version -a").
Maxim Dounin
More information about the nginx
mailing list