[Pound Mailing List] Segmentation Fault URL directive

Discussion:

Felix Zachlod

2014-06-17 09:02:33 UTC

Hello list,

we have rather long URL directives or to be more specific we use the
OrURLs statement to generate a complex URL regex matching. Under some
circumstances pound keeps crashing on startup if the regexes become too
complex. I can not determine an exact length of the regex that causes
the crashing it seems that the strings are somehow exploded as I can
extend it with alphanumeric charecters like "^/abcdefghi" but if I
insert wildcards like "^/abc*" it causes a segfault. This seems to be
related with a maximum length of the regex in some way however as I can
user "^/abc*" without problems if I remove othe URLs from the OrURL
directive.

Can anyone tell what are the limitations of the OrURLs and may these be
lifted?

Thank you in advance
Felix

*** glibc detected *** /usr/local/sbin/pound: free(): invalid next size
(fast): 0x00000000014055e0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x76d76)[0x7f472010dd76]
/lib/x86_64-linux-gnu/libc.so.6(+0x7c773)[0x7f4720113773]
/lib/x86_64-linux-gnu/libc.so.6(realloc+0xf0)[0x7f4720113d60]
/lib/x86_64-linux-gnu/libc.so.6(+0xbf913)[0x7f4720156913]
/lib/x86_64-linux-gnu/libc.so.6(+0xc555b)[0x7f472015c55b]
/lib/x86_64-linux-gnu/libc.so.6(regexec+0xc3)[0x7f472015cbc3]
/usr/local/sbin/pound[0x405c20]
/usr/local/sbin/pound[0x40858a]
/usr/local/sbin/pound[0x40f9cf]
/usr/local/sbin/pound[0x4105eb]
/usr/local/sbin/pound[0x408a72]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd)[0x7f47200b5ead]
/usr/local/sbin/pound[0x409405]
======= Memory map: ========
00400000-0041b000 r-xp 00000000 08:01 929889
/usr/local/sbin/pound
0061b000-0061c000 rw-p 0001b000 08:01 929889
/usr/local/sbin/pound
0061c000-0061e000 rw-p 00000000 00:00 0
011fb000-01426000 rw-p 00000000 00:00 0
[heap]
7f4718000000-7f4718021000 rw-p 00000000 00:00 0
7f4718021000-7f471c000000 ---p 00000000 00:00 0
7f471fc6a000-7f471fc7f000 r-xp 00000000 08:01 786477
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f471fc7f000-7f471fe7f000 ---p 00015000 08:01 786477
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f471fe7f000-7f471fe80000 rw-p 00015000 08:01 786477
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f471fe80000-7f471fe96000 r-xp 00000000 08:01 786574
/lib/x86_64-linux-gnu/libz.so.1.2.7
7f471fe96000-7f4720095000 ---p 00016000 08:01 786574
/lib/x86_64-linux-gnu/libz.so.1.2.7
7f4720095000-7f4720096000 r--p 00015000 08:01 786574
/lib/x86_64-linux-gnu/libz.so.1.2.7
7f4720096000-7f4720097000 rw-p 00016000 08:01 786574
/lib/x86_64-linux-gnu/libz.so.1.2.7
7f4720097000-7f4720219000 r-xp 00000000 08:01 791252
/lib/x86_64-linux-gnu/libc-2.13.so
7f4720219000-7f4720418000 ---p 00182000 08:01 791252
/lib/x86_64-linux-gnu/libc-2.13.so
7f4720418000-7f472041c000 r--p 00181000 08:01 791252
/lib/x86_64-linux-gnu/libc-2.13.so
7f472041c000-7f472041d000 rw-p 00185000 08:01 791252
/lib/x86_64-linux-gnu/libc-2.13.so
7f472041d000-7f4720422000 rw-p 00000000 00:00 0
7f4720422000-7f4720439000 r-xp 00000000 08:01 791270
/lib/x86_64-linux-gnu/libpthread-2.13.so
7f4720439000-7f4720638000 ---p 00017000 08:01 791270
/lib/x86_64-linux-gnu/libpthread-2.13.so
7f4720638000-7f4720639000 r--p 00016000 08:01 791270
/lib/x86_64-linux-gnu/libpthread-2.13.so
7f4720639000-7f472063a000 rw-p 00017000 08:01 791270
/lib/x86_64-linux-gnu/libpthread-2.13.so
7f472063a000-7f472063e000 rw-p 00000000 00:00 0
7f472063e000-7f47206bf000 r-xp 00000000 08:01 791259
/lib/x86_64-linux-gnu/libm-2.13.so
7f47206bf000-7f47208be000 ---p 00081000 08:01 791259
/lib/x86_64-linux-gnu/libm-2.13.so
7f47208be000-7f47208bf000 r--p 00080000 08:01 791259
/lib/x86_64-linux-gnu/libm-2.13.so
7f47208bf000-7f47208c0000 rw-p 00081000 08:01 791259
/lib/x86_64-linux-gnu/libm-2.13.so
7f47208c0000-7f47208c2000 r-xp 00000000 08:01 791266
/lib/x86_64-linux-gnu/libdl-2.13.so
7f47208c2000-7f4720ac2000 ---p 00002000 08:01 791266
/lib/x86_64-linux-gnu/libdl-2.13.so
7f4720ac2000-7f4720ac3000 r--p 00002000 08:01 791266
/lib/x86_64-linux-gnu/libdl-2.13.so
7f4720ac3000-7f4720ac4000 rw-p 00003000 08:01 791266
/lib/x86_64-linux-gnu/libdl-2.13.so
7f4720ac4000-7f4720ad7000 r-xp 00000000 08:01 791253
/lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720ad7000-7f4720cd6000 ---p 00013000 08:01 791253
/lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720cd6000-7f4720cd7000 r--p 00012000 08:01 791253
/lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720cd7000-7f4720cd8000 rw-p 00013000 08:01 791253
/lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720cd8000-7f4720cda000 rw-p 00000000 00:00 0
7f4720cda000-7f4720ea4000 r-xp 00000000 08:01 921803
/usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f4720ea4000-7f47210a3000 ---p 001ca000 08:01 921803
/usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f47210a3000-7f47210be000 r--p 001c9000 08:01 921803
/usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f47210be000-7f47210cd000 rw-p 001e4000 08:01 921803
/usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f47210cd000-7f47210d1000 rw-p 00000000 00:00 0
7f47210d1000-7f4721127000 r-xp 00000000 08:01 921805
/usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f4721127000-7f4721327000 ---p 00056000 08:01 921805
/usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f4721327000-7f472132a000 r--p 00056000 08:01 921805
/usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f472132a000-7f4721331000 rw-p 00059000 08:01 921805
/usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f4721331000-7f4721351000 r-xp 00000000 08:01 791274
/lib/x86_64-linux-gnu/ld-2.13.so
7f4721541000-7f4721547000 rw-p 00000000 00:00 0
7f472154c000-7f4721550000 rw-p 00000000 00:00 0
7f4721550000-7f4721551000 r--p 0001f000 08:01 791274
/lib/x86_64-linux-gnu/ld-2.13.so
7f4721551000-7f4721552000 rw-p 00020000 08:01 791274
/lib/x86_64-linux-gnu/ld-2.13.so
7f4721552000-7f4721553000 rw-p 00000000 00:00 0
7fff30f27000-7fff30f48000 rw-p 00000000 00:00 0
[stack]
7fff30fff000-7fff31000000 r-xp 00000000 00:00 0
[vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
[vsyscall]

--
To unsubscribe send an email with subject unsubscribe to pound-Ws3YcLWMCpvhvxM+***@public.gmane.org
Please contact roseg-***@public.gmane.org for questions.

Felix Zachlod

2014-06-17 09:02:33 UTC

Permalink

Joe Gooch

2014-06-17 11:27:27 UTC

Permalink

Can you send me your config? I'll take a look.
Joe

Post by Felix Zachlod
Hello list,
we have rather long URL directives or to be more specific we use the OrURLs statement to generate a complex URL regex matching. Under some circumstances pound keeps crashing on startup if the regexes become too complex. I can not determine an exact length of the regex that causes the crashing it seems that the strings are somehow exploded as I can extend it with alphanumeric charecters like "^/abcdefghi" but if I insert wildcards like "^/abc*" it causes a segfault. This seems to be related with a maximum length of the regex in some way however as I can user "^/abc*" without problems if I remove othe URLs from the OrURL directive.
Can anyone tell what are the limitations of the OrURLs and may these be lifted?
Thank you in advance
Felix
*** glibc detected *** /usr/local/sbin/pound: free(): invalid next size (fast): 0x00000000014055e0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x76d76)[0x7f472010dd76]
/lib/x86_64-linux-gnu/libc.so.6(+0x7c773)[0x7f4720113773]
/lib/x86_64-linux-gnu/libc.so.6(realloc+0xf0)[0x7f4720113d60]
/lib/x86_64-linux-gnu/libc.so.6(+0xbf913)[0x7f4720156913]
/lib/x86_64-linux-gnu/libc.so.6(+0xc555b)[0x7f472015c55b]
/lib/x86_64-linux-gnu/libc.so.6(regexec+0xc3)[0x7f472015cbc3]
/usr/local/sbin/pound[0x405c20]
/usr/local/sbin/pound[0x40858a]
/usr/local/sbin/pound[0x40f9cf]
/usr/local/sbin/pound[0x4105eb]
/usr/local/sbin/pound[0x408a72]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd)[0x7f47200b5ead]
/usr/local/sbin/pound[0x409405]
======= Memory map: ========
00400000-0041b000 r-xp 00000000 08:01 929889 /usr/local/sbin/pound
0061b000-0061c000 rw-p 0001b000 08:01 929889 /usr/local/sbin/pound
0061c000-0061e000 rw-p 00000000 00:00 0
011fb000-01426000 rw-p 00000000 00:00 0 [heap]
7f4718000000-7f4718021000 rw-p 00000000 00:00 0
7f4718021000-7f471c000000 ---p 00000000 00:00 0
7f471fc6a000-7f471fc7f000 r-xp 00000000 08:01 786477 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f471fc7f000-7f471fe7f000 ---p 00015000 08:01 786477 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f471fe7f000-7f471fe80000 rw-p 00015000 08:01 786477 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f471fe80000-7f471fe96000 r-xp 00000000 08:01 786574 /lib/x86_64-linux-gnu/libz.so.1.2.7
7f471fe96000-7f4720095000 ---p 00016000 08:01 786574 /lib/x86_64-linux-gnu/libz.so.1.2.7
7f4720095000-7f4720096000 r--p 00015000 08:01 786574 /lib/x86_64-linux-gnu/libz.so.1.2.7
7f4720096000-7f4720097000 rw-p 00016000 08:01 786574 /lib/x86_64-linux-gnu/libz.so.1.2.7
7f4720097000-7f4720219000 r-xp 00000000 08:01 791252 /lib/x86_64-linux-gnu/libc-2.13.so
7f4720219000-7f4720418000 ---p 00182000 08:01 791252 /lib/x86_64-linux-gnu/libc-2.13.so
7f4720418000-7f472041c000 r--p 00181000 08:01 791252 /lib/x86_64-linux-gnu/libc-2.13.so
7f472041c000-7f472041d000 rw-p 00185000 08:01 791252 /lib/x86_64-linux-gnu/libc-2.13.so
7f472041d000-7f4720422000 rw-p 00000000 00:00 0
7f4720422000-7f4720439000 r-xp 00000000 08:01 791270 /lib/x86_64-linux-gnu/libpthread-2.13.so
7f4720439000-7f4720638000 ---p 00017000 08:01 791270 /lib/x86_64-linux-gnu/libpthread-2.13.so
7f4720638000-7f4720639000 r--p 00016000 08:01 791270 /lib/x86_64-linux-gnu/libpthread-2.13.so
7f4720639000-7f472063a000 rw-p 00017000 08:01 791270 /lib/x86_64-linux-gnu/libpthread-2.13.so
7f472063a000-7f472063e000 rw-p 00000000 00:00 0
7f472063e000-7f47206bf000 r-xp 00000000 08:01 791259 /lib/x86_64-linux-gnu/libm-2.13.so
7f47206bf000-7f47208be000 ---p 00081000 08:01 791259 /lib/x86_64-linux-gnu/libm-2.13.so
7f47208be000-7f47208bf000 r--p 00080000 08:01 791259 /lib/x86_64-linux-gnu/libm-2.13.so
7f47208bf000-7f47208c0000 rw-p 00081000 08:01 791259 /lib/x86_64-linux-gnu/libm-2.13.so
7f47208c0000-7f47208c2000 r-xp 00000000 08:01 791266 /lib/x86_64-linux-gnu/libdl-2.13.so
7f47208c2000-7f4720ac2000 ---p 00002000 08:01 791266 /lib/x86_64-linux-gnu/libdl-2.13.so
7f4720ac2000-7f4720ac3000 r--p 00002000 08:01 791266 /lib/x86_64-linux-gnu/libdl-2.13.so
7f4720ac3000-7f4720ac4000 rw-p 00003000 08:01 791266 /lib/x86_64-linux-gnu/libdl-2.13.so
7f4720ac4000-7f4720ad7000 r-xp 00000000 08:01 791253 /lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720ad7000-7f4720cd6000 ---p 00013000 08:01 791253 /lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720cd6000-7f4720cd7000 r--p 00012000 08:01 791253 /lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720cd7000-7f4720cd8000 rw-p 00013000 08:01 791253 /lib/x86_64-linux-gnu/libresolv-2.13.so
7f4720cd8000-7f4720cda000 rw-p 00000000 00:00 0
7f4720cda000-7f4720ea4000 r-xp 00000000 08:01 921803 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f4720ea4000-7f47210a3000 ---p 001ca000 08:01 921803 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f47210a3000-7f47210be000 r--p 001c9000 08:01 921803 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f47210be000-7f47210cd000 rw-p 001e4000 08:01 921803 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
7f47210cd000-7f47210d1000 rw-p 00000000 00:00 0
7f47210d1000-7f4721127000 r-xp 00000000 08:01 921805 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f4721127000-7f4721327000 ---p 00056000 08:01 921805 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f4721327000-7f472132a000 r--p 00056000 08:01 921805 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f472132a000-7f4721331000 rw-p 00059000 08:01 921805 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
7f4721331000-7f4721351000 r-xp 00000000 08:01 791274 /lib/x86_64-linux-gnu/ld-2.13.so
7f4721541000-7f4721547000 rw-p 00000000 00:00 0
7f472154c000-7f4721550000 rw-p 00000000 00:00 0
7f4721550000-7f4721551000 r--p 0001f000 08:01 791274 /lib/x86_64-linux-gnu/ld-2.13.so
7f4721551000-7f4721552000 rw-p 00020000 08:01 791274 /lib/x86_64-linux-gnu/ld-2.13.so
7f4721552000-7f4721553000 rw-p 00000000 00:00 0
7fff30f27000-7fff30f48000 rw-p 00000000 00:00 0 [stack]
7fff30fff000-7fff31000000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
--

--
To unsubscribe send an email with subject unsubscribe to pound-Ws3YcLWMCpvhvxM+***@public.gmane.org
Please contact roseg-***@public.gmane.org for questions.