Weird behavior on SSL, and corruption on reload

[Maxim Dounin]

Hello!

On Sun, Sep 25, 2011 at 07:14:40AM -0400, orensol wrote:

> Hello Maxim,
> 
> For now I can't reproduce the problem, if it happens again i'll try to
> catch a real backtrace.
> 
> Here are the other details. Thanks!
> 
> 
> 
> nginx:
> nginx version: nginx/0.8.35
> built by gcc 4.1.1 20070105 (Red Hat 4.1.1-52)
> TLS SNI support disabled
> configure arguments: --with-http_ssl_module
> --add-module=/root/ngx_cache_purge-1.0
> 
> 
> 
> openssl:
> OpenSSL 0.9.8b 04 May 2006
> built on: Wed Oct 17 18:15:17 EDT 2007
> platform: linux-elf
> options:  bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long)
> blowfish(idx) 
> compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT
> -DDSO_DLFCN -DHAVE_DLFCN_H -DKRB5_MIT -I/usr/kerberos/include -DL_ENDIAN
> -DTERMIO -Wall -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
> -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686
> -mtune=generic -fasynchronous-unwind-tables -Wa,--noexecstack
> -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DMD5_ASM
> -DRMD160_ASM -DAES_ASM
> OPENSSLDIR: "/etc/pki/tls"
> engines:  dynamic padlock

Both nginx 0.8.35 and openssl 0.9.8b are rather old and have known 
memory corruption issues.  You may want to upgrade before doing 
anything else.

Maxim Dounin