https://issues.apache.org/bugzilla/show_bug.cgi?id=51235

             Bug #: 51235
           Summary: Access Violation in httpd.exe originating in mod_jk
                    code while getting sessionid from headers
           Product: Tomcat Connectors
           Version: 1.2.28
          Platform: PC
        OS/Version: Windows Server 2003
            Status: NEW
          Severity: major
          Priority: P2
         Component: mod_jk
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: pierre.boudr...@t4g.com
    Classification: Unclassified


Created attachment 27041
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=27041
Screen shots of one of crash dumps in Visual Studio 2010 debugger

This happens in our production environment almost every day.  It causes the
Apache httpd.exe process to crash and restart itself.

The error shows up in the Windows event log as:
Faulting application httpd.exe, version 2.2.17.0, faulting module msvcrt.dll,
version 7.0.3790.3959, fault address 0x00038bab.

We have not been able to reproduce it with tests, but we do have several crash
dumps that can be used to debug.  

The fault is always in exactly the same spot in the mod_jk code.  I opened one
of the crash dumps in Visual Studio 2010 and tried to find the problem.  I
found that the code is going out of bounds of an array in get_sessionid() in
jk_lb_worker.c because the num_headers in jk_ws_service_t that gets passed in
ot the get_sessionid method is bigger than the actual number of headers in
header_names and header_values.  See ApacheCrash_2.png in the attached zip
file.  I don't know how it got this way though...

I can provide crash dumps to someone who can look into this.  We get new ones
regularly.

Configuration:
2 load balanced web servers running httpd 2.2.17 mod_jk 1.2.28 on Windows
Server 2003
6 JBOSS 4.2 workers running ATG 9.0 application using mod_jk loadbalancer

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to