https://bz.apache.org/bugzilla/show_bug.cgi?id=66601
Bug ID: 66601 Summary: coredump at apr_pool_destroy in mod Product: Apache httpd-2 Version: 2.5-HEAD Hardware: PC OS: Linux Status: NEW Severity: normal Priority: P2 Component: mod_cache_disk / mod_disk_cache Assignee: bugs@httpd.apache.org Reporter: chengyech...@huawei.com Target Milestone: --- A core dump occurs in the apr_pool_destroy function (line 1373) of mod_cache_disk.c. After analysis, it is found that the input pool is 0x0. I wonder whether judgment can be added here or in apr_pool_destroy. Or you don't think that's possible here; The following is my coredump screenshot and the printed content. Ignore the specific line number due to the version. The positions are the same. (gdb) bt #0 run_cleanups (cref=0x70) at memory/unix/apr_pools.c:2660 #1 apr_pool_destroy (pool=0x0) at memory/unix/apr_pools.c:993 #2 0x0000ffff82b32b08 in commit_entity (h=0xffff68015b50, r=0xffff68012c70) at mod_cache_disk.c:1366 #3 0x0000ffff82b53ffc in cache_save_store (f=0xffff68014a28, in=0xffff68015b10, conf=0xaaaaffe6d278, cache=0xffff680146d0) at mod_cache.c:736 #4 0x0000ffff82b56af0 in cache_save_filter (f=0xffff68014a28, in=0xffff68015b10) at mod_cache.c:1606 #5 0x0000aaaad8e48064 in default_handler (r=0xffff68012c70) at core.c:4979 #6 0x0000aaaad8e5ce80 in ap_run_handler (r=r@entry=0xffff68012c70) at config.c:169 #7 0x0000aaaad8e5d588 in ap_invoke_handler (r=r@entry=0xffff68012c70) at config.c:443 #8 0x0000aaaad8e74540 in ap_process_async_request (r=r@entry=0xffff68012c70) at http_request.c:452 #9 0x0000aaaad8e7076c in ap_process_http_async_connection (c=0xfffef4000fa0) at http_core.c:155 #10 ap_process_http_connection (c=0xfffef4000fa0) at http_core.c:246 #11 0x0000aaaad8e66b20 in ap_run_process_connection (c=c@entry=0xfffef4000fa0) at connection.c:42 #12 0x0000ffff824a1b68 in process_socket (thd=thd@entry=0xaaaafffa9610, p=<optimized out>, sock=<optimized out>, cs=<optimized out>, my_child_num=my_child_num@entry=1, my_thread_num=my_thread_num@entry=24) at event.c:1052 #13 0x0000ffff824a2394 in worker_thread (thd=0xaaaafffa9610, dummy=<optimized out>) at event.c:2141 #14 0x0000ffff8321b280 in start_thread (arg=0x0) at pthread_create.c:443 #15 0x0000ffff8328179c in thread_start () at ../sysdeps/unix/sysv/linux/aarch64/clone.S:79 (gdb) f 2 (gdb) p *(disk_cache_object_t *)((((cache_request_rec *)r->output_filters->ctx)->handle)->cache_obj)->vobj $40 = {root = 0xffff68015d38 "/var/cache/httpd/proxy", root_len = 22, prefix = 0x0, data = {pool = 0x0, file = 0xffff68015d70 "/var/cache/httpd/proxy/NP/ZG/fBHmUYzRXQL9t8q4Qw.data", fd = 0x0, tempfile = 0x0, tempfd = 0x0}, hdrs = {pool = 0x0, file = 0xffff68015da8 "/var/cache/httpd/proxy/NP/ZG/fBHmUYzRXQL9t8q4Qw.header", fd = 0x0, tempfile = 0x0, tempfd = 0x0}, vary = {pool = 0x0, file = 0xffff68015de0 "/var/cache/httpd/proxy/NP/ZG/fBHmUYzRXQL9t8q4Qw.header", fd = 0x0, tempfile = 0x0, tempfd = 0x0}, hashfile = 0xffff68015d50 "NP/ZG/fBHmUYzRXQL9t8q4Qw", name = 0xffff68015d20 "https://sinon:443/?", key = 0x0, file_size = 13, disk_info = {format = 0, status = 0, name_len = 0, entity_version = 1, date = 0, expire = 0, request_time = 0, response_time = 0, inode = 3019152, device = 64768, has_body = 1, header_only = 0, control = {parsed = 0, cache_control = 0, pragma = 0, no_cache = 0, no_cache_header = 0, no_store = 0, max_age = 0, max_stale = 0, min_fresh = 0, no_transform = 0, only_if_cached = 0, public = 0, private = 0, private_header = 0, must_revalidate = 0, proxy_revalidate = 0, s_maxage = 0, invalidated = 0, max_age_value = 0, max_stale_value = 0, min_fresh_value = 0, s_maxage_value = 0}}, headers_in = 0xffff68016258, headers_out = 0xffff68016070, offset = 0, timeout = 0, done = 1} (gdb) -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org