[
https://issues.apache.org/jira/browse/TS-4192?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15149623#comment-15149623
]
Leif Hedstrom commented on TS-4192:
-----------------------------------
This sounds potentially serious, once we fix this, we should consider a back
port as well. Marking it as a blocker for that reason.
> Coredump in HPACK encoding
> --------------------------
>
> Key: TS-4192
> URL: https://issues.apache.org/jira/browse/TS-4192
> Project: Traffic Server
> Issue Type: Bug
> Components: HTTP/2
> Affects Versions: 6.1.1
> Reporter: Bryan Call
> Priority: Blocker
> Labels: crash
> Fix For: 6.2.0
>
>
> {code}
> #0 0x0000000000972f44 in mime_hdr_field_detach (mh=0x61d002955508,
> field=0x629002954de8, detach_all_dups=<optimized out>) at MIME.cc:1582
> name_length = <optimized out>
> prev = 0x0
> first = <optimized out>
> next_dup = <optimized out>
> #1 0x0000000000976daa in mime_hdr_field_delete (heap=0x61d002955480,
> mh=0x61d002955508, field=field@entry=0x629002954de8,
> delete_all_dups=delete_all_dups@entry=false) at MIME.cc:1631
> No locals.
> #2 0x0000000000844c6d in field_delete (delete_all_dups=false,
> field=0x629002954de8, this=<optimized out>) at ../../proxy/hdrs/MIME.h:1169
> No locals.
> #3 Http2DynamicTable::add_header_field (this=0x607000fa8b60,
> field=<optimized out>) at HPACK.cc:307
> last_field = 0x629002954de8
> new_field = 0x629002954de8
> name = 0x628000009e18 "Via"
> value = 0x625009705142 "http/1.0 c1.ycs.ne1.yahoo.com
> (ApacheTrafficServer [cRs f ]), https/1.1 l28.ycs.sjb.yahoo.com
> (ApacheTrafficServer [cRs f ])\r\nServer: ATS\r\nConnection:
> keep-alive\r\n\r\n", '\276' <repeats 35 times>...
> header_size = <optimized out>
> #4 0x0000000000845112 in add_header_field_to_dynamic_table (field=<optimized
> out>, this=<optimized out>) at HPACK.cc:253
> No locals.
> #5 encode_literal_header_field_with_indexed_name
> (buf_start=buf_start@entry=0x7fffedda2487 <incomplete sequence \340>,
> buf_end=buf_end@entry=0x7fffedda6437 "", header=...,
> index=<optimized out>, indexing_table=...,
> type=type@entry=HPACK_FIELD_INDEXED_LITERAL) at HPACK.cc:527
> p = 0x7fffedda2487 <incomplete sequence \340>
> len = <optimized out>
> prefix = 0 '\000'
> flag = 0 '\000'
> value = <optimized out>
> __FUNCTION__ = "encode_literal_header_field_with_indexed_name"
> #6 0x000000000080a8ca in http2_write_header_field
> (out=out@entry=0x7fffedda2487 <incomplete sequence \340>,
> end=end@entry=0x7fffedda6437 "", header=..., indexing_table=...) at
> HTTP2.cc:509
> field_type = HPACK_FIELD_INDEXED_LITERAL
> name = <optimized out>
> #7 0x000000000080c616 in http2_write_header_fragment
> (in=in@entry=0x616000034340, field_iter=..., out=out@entry=0x7fffedda2441
> "\354l\226\320z\276\224\020T\276R( \005\265",
> out_len=out_len@entry=16374, indexing_table=..., cont=@0x7fffedda2300:
> false) at HTTP2.cc:592
> name = 0x628000009e18 "Via"
> p = 0x7fffedda2487 <incomplete sequence \340>
> end = 0x7fffedda6437 ""
> len = <optimized out>
> field = 0x61d0052550a8
> #8 0x00000000008272a0 in Http2ConnectionState::send_headers_frame
> (this=this@entry=0x618000018ee8, fetch_sm=<optimized out>) at
> Http2ConnectionState.cc:1009
> type = HTTP2_FRAME_TYPE_HEADERS
> __FUNCTION__ = "send_headers_frame"
> buf_len = 16375
> payload_length = <optimized out>
> flags = 0 '\000'
> stream = 0x60f00003e890
> resp_header = 0x616000034340
> #9 0x00000000008388db in Http2ConnectionState::main_event_handler
> (this=0x618000018ee8, event=-2, edata=<optimized out>) at
> Http2ConnectionState.cc:779
> fetch_sm = <optimized out>
> __FUNCTION__ = "main_event_handler"
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
