I set the breakpoints to the following functions:
ENGINE_register_ciphers
ENGINE_unregister_ciphers (never called!!!)
ENGINE_cleanup
1) Breakpoint ENGINE_register_ciphers (e=0x7ffff8390760) from mod_ssl
e = {id = 0x7ffff1f15100 "aesni", name = 0x7ffff1f15130 "Intel AES-NI engine
(no-aesni)", rsa_meth = 0x0, dsa_meth = 0x0, dh_meth = 0x0, ecdh_meth = 0x0,
ecdsa_meth = 0x0, rand_meth = 0x0, store_meth = 0x0, ciphers = 0, digests = 0,
destroy = 0, init = 0x7ffff1e810fb <aesni_init>, finish = 0, ctrl = 0,
load_privkey = 0, load_pubkey = 0, load_ssl_client_cert = 0, cmd_defns = 0x0,
flags = 0, struct_ref = 2, funct_ref = 0, ex_data = {sk = 0x0, dummy = 0}, prev
= 0x0, next = 0x0}
e->ciphers was 0 => just return 1
cipher_table = (ENGINE_TABLE *) 0x0
2) Breakpoint ENGINE_cleanup () from mod_ssl
3) Breakpoint ENGINE_register_ciphers (e=0x7ffff8444710) from mod_ssl
e = {id = 0x7ffff1f15100 "aesni", name = 0x7ffff1f15130 "Intel AES-NI engine
(no-aesni)", rsa_meth = 0x0, dsa_meth = 0x0, dh_meth = 0x0, ecdh_meth = 0x0,
ecdsa_meth = 0x0, rand_meth = 0x0, store_meth = 0x0, ciphers = 0, digests = 0,
destroy = 0, init = 0x7ffff1e810fb <aesni_init>, finish = 0, ctrl = 0,
load_privkey = 0, load_pubkey = 0, load_ssl_client_cert = 0, cmd_defns = 0x0,
flags = 0, struct_ref = 2, funct_ref = 0, ex_data = {sk = 0x0, dummy = 0}, prev
= 0x0, next = 0x0}
e->ciphers was 0 => just return 1
cipher_table = (ENGINE_TABLE *) 0x0
4) Breakpoint ENGINE_register_ciphers (e=0x7ffff8641180) from libcurl
e = {id = 0x7ffff1f15100 "aesni", name = 0x7ffff1f15110 "Intel AES-NI engine",
rsa_meth = 0x0, dsa_meth = 0x0, dh_meth = 0x0, ecdh_meth = 0x0, ecdsa_meth =
0x0, rand_meth = 0x0, store_meth = 0x0, ciphers = 0x7ffff1e8137d
<aesni_ciphers>, digests = 0, destroy = 0, init = 0x7ffff1e810fb <aesni_init>,
finish = 0, ctrl = 0, load_privkey = 0, load_pubkey = 0, load_ssl_client_cert =
0, cmd_defns = 0x0, flags = 0, struct_ref = 1, funct_ref = 0, ex_data = {sk =
0x0, dummy = 0}, prev = 0x0, next = 0x0}
cipher_table = (ENGINE_TABLE *) 0x0
*e->ciphers = {int (ENGINE *, const EVP_CIPHER **, const int **, int)}
0x7ffff1e8137d <aesni_ciphers>
=> called
int num_nids = e->ciphers(e, NULL, &nids, 0);
num_nids = 12
=> called
return engine_table_register(&cipher_table, ....
*cipher_table = {piles = {b = 0x7ffff861ea90, comp = 0x7ffff1e7d602
<engine_pile_cmp_LHASH_COMP>, hash = 0x7ffff1e7d5e0
<engine_pile_hash_LHASH_HASH>, num_nodes = 8, num_alloc_nodes = 16, p = 0, pmax
= 8, up_load = 512, down_load = 256, num_items = 12, num_expands = 0,
num_expand_reallocs = 0, num_contracts = 0, num_contract_reallocs = 0,
num_hash_calls = 24, num_comp_calls = 0, num_insert = 12, num_replace = 0,
num_delete = 0, num_no_delete = 0, num_retrieve = 0, num_retrieve_miss = 12,
num_hash_comps = 8, error = 0}}
Then it waited for request and seqfaulted when it arrived:
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff214ea60 in sha1_md () from /lib/libcrypto.so.0.9.8
(gdb) backtrace
#0 0x00007ffff214ea60 in sha1_md () from /lib/libcrypto.so.0.9.8
#1 0x00007ffff1e7c7cf in engine_unlocked_init (e=0x7ffff8641180) at
eng_init.c:67
#2 0x00007ffff1e7dc34 in engine_table_select (table=0x7ffff216c860, nid=427)
at eng_table.c:274
#3 0x00007ffff1e7f095 in ENGINE_get_cipher_engine (nid=427) at tb_cipher.c:115
*e = {id = 0x2 <Address 0x2 out of bounds>, name = 0x7ffff1eff31c "des-cbc",
rsa_meth = 0x7ffff214e2c0, dsa_meth = 0x31, dh_meth = 0x7fff00000090, ecdh_meth
= 0x7ffff2149d20, ecdsa_meth = 0x7ffff214ea60, rand_meth = 0x7ffff1eec806,
store_meth = 0x0, ciphers = 0x31, digests = 0x7fff00000091, destroy =
0x7ffff2149d80 <r4_40_cipher>, init = 0x7ffff214ea60 <sha1_md>, finish =
0x7ffff1eec806 <PKCS12_PBE_keyivgen>, ctrl = 0x7ffff1e80278 <dynamic_ctrl>,
load_privkey = 0x31, load_pubkey = 0x7fff00000092, load_ssl_client_cert =
0x7ffff2149ae0 <des_ede3_cbc>, cmd_defns = 0x7ffff214ea60, flags = -236009466,
struct_ref = 32767, funct_ref = 0, ex_data = {sk = 0x21, dummy = -146014162},
prev = 0x7ffff74c7ea8, next = 0x20}
*cipher_table = {piles = {b = 0x7ffff861ea90, comp = 0x7ffff1e7d602
<engine_pile_cmp_LHASH_COMP>, hash = 0x7ffff1e7d5e0
<engine_pile_hash_LHASH_HASH>, num_nodes = 8, num_alloc_nodes = 16, p = 0, pmax
= 8, up_load = 512, down_load = 256, num_items = 12, num_expands = 0,
num_expand_reallocs = 0, num_contracts = 0, num_contract_reallocs = 0,
num_hash_calls = 25, num_comp_calls = 1, num_insert = 12, num_replace = 0,
num_delete = 0, num_no_delete = 0, num_retrieve = 1, num_retrieve_miss = 12,
num_hash_comps = 10, error = 0}}
Full backtrace included.
GNU gdb (GDB) 7.1-ubuntu
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/sbin/apache2...done.
(gdb) handle SIG33 pass nostop noprint
Signal Stop Print Pass to program Description
SIG33 No No Yes Real-time event 33
(gdb) set pagination 0
(gdb) break ENGINE_register_ciphers
Function "ENGINE_register_ciphers" not defined.
Make breakpoint pending on future shared library load? (y or [n]) Breakpoint 1
(ENGINE_register_ciphers) pending.
(gdb) break ENGINE_unregister_ciphers
Function "ENGINE_unregister_ciphers" not defined.
Make breakpoint pending on future shared library load? (y or [n]) Breakpoint 2
(ENGINE_unregister_ciphers) pending.
(gdb) break ENGINE_cleanup
Function "ENGINE_cleanup" not defined.
Make breakpoint pending on future shared library load? (y or [n]) Breakpoint 3
(ENGINE_cleanup) pending.
(gdb) run
Starting program: /usr/sbin/apache2 -k start -X
[Thread debugging using libthread_db enabled]
Breakpoint 1, ENGINE_register_ciphers (e=0x7ffff8390760) at tb_cipher.c:76
76 if(e->ciphers)
(gdb) backtrace
#0 ENGINE_register_ciphers (e=0x7ffff8390760) at tb_cipher.c:76
#1 0x00007ffff1e7e57d in ENGINE_register_complete (e=0x7ffff8390760) at
eng_fat.c:139
#2 0x00007ffff1e80b64 in ENGINE_load_aesni () at eng_aesni.c:108
#3 0x00007ffff1e7e626 in ENGINE_load_builtin_engines () at eng_all.c:75
#4 0x00007ffff115af65 in ssl_hook_pre_config (pconf=0x7ffff820e138,
plog=<value optimized out>, ptemp=<value optimized out>) at
/build/buildd/apache2-2.2.14/modules/ssl/mod_ssl.c:274
#5 0x00007ffff7fd5e7e in ap_run_pre_config (pconf=0x7ffff820e138,
plog=0x7ffff82422d8, ptemp=0x7ffff82442e8) at
/build/buildd/apache2-2.2.14/server/config.c:86
#6 0x00007ffff7fc2120 in main (argc=4, argv=0x7fffffffe728) at
/build/buildd/apache2-2.2.14/server/main.c:640
(gdb) l
71 engine_table_cleanup(&cipher_table);
72 }
73
74 int ENGINE_register_ciphers(ENGINE *e)
75 {
76 if(e->ciphers)
77 {
78 const int *nids;
79 int num_nids = e->ciphers(e, NULL, &nids, 0);
80 if(num_nids > 0)
(gdb) print *e
$1 = {id = 0x7ffff1f15100 "aesni", name = 0x7ffff1f15130 "Intel AES-NI engine
(no-aesni)", rsa_meth = 0x0, dsa_meth = 0x0, dh_meth = 0x0, ecdh_meth = 0x0,
ecdsa_meth = 0x0, rand_meth = 0x0, store_meth = 0x0, ciphers = 0, digests = 0,
destroy = 0, init = 0x7ffff1e810fb <aesni_init>, finish = 0, ctrl = 0,
load_privkey = 0, load_pubkey = 0, load_ssl_client_cert = 0, cmd_defns = 0x0,
flags = 0, struct_ref = 2, funct_ref = 0, ex_data = {sk = 0x0, dummy = 0}, prev
= 0x0, next = 0x0}
(gdb) print cipher_table
$2 = (ENGINE_TABLE *) 0x0
(gdb) n
85 return 1;
(gdb)
86 }
(gdb) c
Continuing.
Breakpoint 3, ENGINE_cleanup () at eng_lib.c:188
188 if(int_cleanup_check(0))
(gdb) backtrace
#0 ENGINE_cleanup () at eng_lib.c:188
#1 0x00007ffff115afb8 in ssl_cleanup_pre_config (data=<value optimized out>)
at /build/buildd/apache2-2.2.14/modules/ssl/mod_ssl.c:238
#2 0x00007ffff7706c23 in ?? () from /usr/lib/libapr-1.so.0
#3 0x00007ffff77059af in apr_pool_clear () from /usr/lib/libapr-1.so.0
#4 0x00007ffff7fc21fd in main (argc=4, argv=0x7fffffffe728) at
/build/buildd/apache2-2.2.14/server/main.c:692
(gdb) l
183 (*(item->cb))();
184 OPENSSL_free(item);
185 }
186 void ENGINE_cleanup(void)
187 {
188 if(int_cleanup_check(0))
189 {
190 sk_ENGINE_CLEANUP_ITEM_pop_free(cleanup_stack,
191 engine_cleanup_cb_free);
192 cleanup_stack = NULL;
(gdb) n
190 sk_ENGINE_CLEANUP_ITEM_pop_free(cleanup_stack,
(gdb) print cleanup_stack
$5 = (STACK *) 0x7ffff83908d0
(gdb) print *cleanup_stack
$6 = {num = 1, data = 0x7ffff8390900, sorted = 0, num_alloc = 4, comp = 0}
(gdb) n
192 cleanup_stack = NULL;
(gdb)
196 RAND_set_rand_method(NULL);
(gdb)
197 }
(gdb)
ssl_cleanup_pre_config (data=<value optimized out>) at
/build/buildd/apache2-2.2.14/modules/ssl/mod_ssl.c:240
240 ERR_remove_state(0);
(gdb) c
Continuing.
warning: Temporarily disabling breakpoints for unloaded shared library
"/lib/libcrypto.so.0.9.8"
Breakpoint 1, ENGINE_register_ciphers (e=0x7ffff8444710) at tb_cipher.c:76
76 if(e->ciphers)
(gdb) backtrace
#0 ENGINE_register_ciphers (e=0x7ffff8444710) at tb_cipher.c:76
#1 0x00007ffff1e7e57d in ENGINE_register_complete (e=0x7ffff8444710) at
eng_fat.c:139
#2 0x00007ffff1e80b64 in ENGINE_load_aesni () at eng_aesni.c:108
#3 0x00007ffff1e7e626 in ENGINE_load_builtin_engines () at eng_all.c:75
#4 0x00007ffff115af65 in ssl_hook_pre_config (pconf=0x7ffff820e138,
plog=<value optimized out>, ptemp=<value optimized out>) at
/build/buildd/apache2-2.2.14/modules/ssl/mod_ssl.c:274
#5 0x00007ffff7fd5e7e in ap_run_pre_config (pconf=0x7ffff820e138,
plog=0x7ffff82422d8, ptemp=0x7ffff8216178) at
/build/buildd/apache2-2.2.14/server/config.c:86
#6 0x00007ffff7fc2298 in main (argc=4, argv=0x7fffffffe728) at
/build/buildd/apache2-2.2.14/server/main.c:711
(gdb) print *e
$8 = {id = 0x7ffff1f15100 "aesni", name = 0x7ffff1f15130 "Intel AES-NI engine
(no-aesni)", rsa_meth = 0x0, dsa_meth = 0x0, dh_meth = 0x0, ecdh_meth = 0x0,
ecdsa_meth = 0x0, rand_meth = 0x0, store_meth = 0x0, ciphers = 0, digests = 0,
destroy = 0, init = 0x7ffff1e810fb <aesni_init>, finish = 0, ctrl = 0,
load_privkey = 0, load_pubkey = 0, load_ssl_client_cert = 0, cmd_defns = 0x0,
flags = 0, struct_ref = 2, funct_ref = 0, ex_data = {sk = 0x0, dummy = 0}, prev
= 0x0, next = 0x0}
(gdb) print cipher_table
$9 = (ENGINE_TABLE *) 0x0
(gdb) l
71 engine_table_cleanup(&cipher_table);
72 }
73
74 int ENGINE_register_ciphers(ENGINE *e)
75 {
76 if(e->ciphers)
77 {
78 const int *nids;
79 int num_nids = e->ciphers(e, NULL, &nids, 0);
80 if(num_nids > 0)
(gdb) n
85 return 1;
(gdb)
86 }
(gdb)
ENGINE_register_complete (e=0x7ffff8444710) at eng_fat.c:140
140 ENGINE_register_digests(e);
(gdb) c
Continuing.
Breakpoint 1, ENGINE_register_ciphers (e=0x7ffff8641180) at tb_cipher.c:76
76 if(e->ciphers)
(gdb) backtrace
#0 ENGINE_register_ciphers (e=0x7ffff8641180) at tb_cipher.c:76
#1 0x00007ffff1e7e57d in ENGINE_register_complete (e=0x7ffff8641180) at
eng_fat.c:139
#2 0x00007ffff1e80b64 in ENGINE_load_aesni () at eng_aesni.c:108
#3 0x00007ffff1e7e626 in ENGINE_load_builtin_engines () at eng_all.c:75
#4 0x00007ffff0088c09 in ?? () from /usr/lib/libcurl.so.4
#5 0x00007ffff0091b59 in curl_global_init () from /usr/lib/libcurl.so.4
#6 0x00007ffff02b66f0 in zm_startup_curl (type=-127659648, module_number=43)
at /build/buildd/php5-5.3.2/ext/curl/interface.c:819
#7 0x00007ffff3d7bbcb in zend_startup_module_ex (module=0x7ffff84ce860) at
/build/buildd/php5-5.3.2/Zend/zend_API.c:1613
#8 0x00007ffff3d84865 in zend_hash_apply (ht=0x7ffff44701c0,
apply_func=0x7ffff3d7bad0 <zend_startup_module_ex>) at
/build/buildd/php5-5.3.2/Zend/zend_hash.c:875
#9 0x00007ffff3d7ef4a in zend_startup_modules () at
/build/buildd/php5-5.3.2/Zend/zend_API.c:1662
#10 0x00007ffff3d254b5 in php_module_startup (sf=0x7ffff446f120,
additional_modules=0x7ffff74c7e40, num_additional_modules=1) at
/build/buildd/php5-5.3.2/main/main.c:2050
#11 0x00007ffff3e043b5 in php_apache2_startup (sapi_module=0x7ffff8641180) at
/build/buildd/php5-5.3.2/sapi/apache2handler/sapi_apache2.c:335
#12 0x00007ffff3e04fa0 in php_apache_server_startup (pconf=0x7ffff820e138,
plog=0x1e, ptemp=0x7ffff1f14c52, s=0x7ffff8214938) at
/build/buildd/php5-5.3.2/sapi/apache2handler/sapi_apache2.c:448
#13 0x00007ffff7fd5f79 in ap_run_post_config (pconf=0x7ffff820e138,
plog=0x7ffff82422d8, ptemp=0x7ffff8216178, s=0x7ffff8214938) at
/build/buildd/apache2-2.2.14/server/config.c:95
#14 0x00007ffff7fc2327 in main (argc=4, argv=0x7fffffffe728) at
/build/buildd/apache2-2.2.14/server/main.c:731
(gdb) print *e
$10 = {id = 0x7ffff1f15100 "aesni", name = 0x7ffff1f15110 "Intel AES-NI
engine", rsa_meth = 0x0, dsa_meth = 0x0, dh_meth = 0x0, ecdh_meth = 0x0,
ecdsa_meth = 0x0, rand_meth = 0x0, store_meth = 0x0, ciphers = 0x7ffff1e8137d
<aesni_ciphers>, digests = 0, destroy = 0, init = 0x7ffff1e810fb <aesni_init>,
finish = 0, ctrl = 0, load_privkey = 0, load_pubkey = 0, load_ssl_client_cert =
0, cmd_defns = 0x0, flags = 0, struct_ref = 1, funct_ref = 0, ex_data = {sk =
0x0, dummy = 0}, prev = 0x0, next = 0x0}
(gdb) print cipher_table
$11 = (ENGINE_TABLE *) 0x0
(gdb) print *e->ciphers
$12 = {int (ENGINE *, const EVP_CIPHER **, const int **, int)} 0x7ffff1e8137d
<aesni_ciphers>
(gdb) l
71 engine_table_cleanup(&cipher_table);
72 }
73
74 int ENGINE_register_ciphers(ENGINE *e)
75 {
76 if(e->ciphers)
77 {
78 const int *nids;
79 int num_nids = e->ciphers(e, NULL, &nids, 0);
80 if(num_nids > 0)
(gdb) n
79 int num_nids = e->ciphers(e, NULL, &nids, 0);
(gdb) print num_nids
$13 = 0
(gdb) n
80 if(num_nids > 0)
(gdb) print num_nids
$14 = 12
(gdb) n
81 return engine_table_register(&cipher_table,
(gdb) print cipher_table
$15 = (ENGINE_TABLE *) 0x0
(gdb) n
86 }
(gdb) print cipher_table
$16 = (ENGINE_TABLE *) 0x7ffff8641250
(gdb) print *cipher_table
$17 = {piles = {b = 0x7ffff861ea90, comp = 0x7ffff1e7d602
<engine_pile_cmp_LHASH_COMP>, hash = 0x7ffff1e7d5e0
<engine_pile_hash_LHASH_HASH>, num_nodes = 8, num_alloc_nodes = 16, p = 0, pmax
= 8, up_load = 512, down_load = 256, num_items = 12, num_expands = 0,
num_expand_reallocs = 0, num_contracts = 0, num_contract_reallocs = 0,
num_hash_calls = 24, num_comp_calls = 0, num_insert = 12, num_replace = 0,
num_delete = 0, num_no_delete = 0, num_retrieve = 0, num_retrieve_miss = 12,
num_hash_comps = 8, error = 0}}
(gdb) n
ENGINE_register_complete (e=0x7ffff8641180) at eng_fat.c:140
140 ENGINE_register_digests(e);
(gdb)
142 ENGINE_register_RSA(e);
(gdb)
145 ENGINE_register_DSA(e);
(gdb)
148 ENGINE_register_DH(e);
(gdb)
151 ENGINE_register_ECDH(e);
(gdb)
154 ENGINE_register_ECDSA(e);
(gdb)
156 ENGINE_register_RAND(e);
(gdb)
157 return 1;
(gdb)
158 }
(gdb) print *cipher_table
$18 = {piles = {b = 0x7ffff861ea90, comp = 0x7ffff1e7d602
<engine_pile_cmp_LHASH_COMP>, hash = 0x7ffff1e7d5e0
<engine_pile_hash_LHASH_HASH>, num_nodes = 8, num_alloc_nodes = 16, p = 0, pmax
= 8, up_load = 512, down_load = 256, num_items = 12, num_expands = 0,
num_expand_reallocs = 0, num_contracts = 0, num_contract_reallocs = 0,
num_hash_calls = 24, num_comp_calls = 0, num_insert = 12, num_replace = 0,
num_delete = 0, num_no_delete = 0, num_retrieve = 0, num_retrieve_miss = 12,
num_hash_comps = 8, error = 0}}
(gdb) c
Continuing.
[New Thread 0x7fffe8d5d710 (LWP 22106)]
[Thread 0x7fffe8d5d710 (LWP 22106) exited]
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff214ea60 in sha1_md () from /lib/libcrypto.so.0.9.8
(gdb) backtrace
#0 0x00007ffff214ea60 in sha1_md () from /lib/libcrypto.so.0.9.8
#1 0x00007ffff1e7c7cf in engine_unlocked_init (e=0x7ffff8641180) at
eng_init.c:67
#2 0x00007ffff1e7dc34 in engine_table_select (table=0x7ffff216c860, nid=427)
at eng_table.c:274
#3 0x00007ffff1e7f095 in ENGINE_get_cipher_engine (nid=427) at tb_cipher.c:115
#4 0x00007ffff1e96ad6 in do_evp_enc_engine (ctx=0x7ffff86f6ec0,
pcipher=0x7fffffffda30, impl=0x0) at enc_min.c:161
#5 0x00007ffff1e96c24 in EVP_CipherInit_ex (ctx=0x7ffff86f6ec0,
cipher=0x7ffff214a0e0, impl=0x0, key=0x7ffff86f6e58
"\213\356\326U\370\246&*8\021\234\377k\357\343p\264\210k\276N \361e\324> ^",
iv=0x7ffff86f6e98
"\vL\037fZ\367\nOe\037_밖\336\274C\344\267L\215p\330\234\302\203\377\233Yz\337߱",
enc=0) at enc_min.c:229
#6 0x00007ffff382f686 in tls1_change_cipher_state (s=0x7ffff86d6bc0, which=33)
at t1_enc.c:434
#7 0x00007ffff3828cbe in ssl3_do_change_cipher_spec (s=0x7ffff86d6bc0) at
s3_pkt.c:1246
#8 0x00007ffff382889b in ssl3_read_bytes (s=0x7ffff86d6bc0, type=22,
buf=0x7ffff86df3e0 "\020", len=4, peek=0) at s3_pkt.c:1110
#9 0x00007ffff3829ad9 in ssl3_get_message (s=0x7ffff86d6bc0, st1=8608,
stn=8609, mt=-1, max=514, ok=0x7fffffffde28) at s3_both.c:394
#10 0x00007ffff381c12b in ssl3_get_cert_verify (s=0x7ffff86d6bc0) at
s3_srvr.c:2311
#11 0x00007ffff381895b in ssl3_accept (s=0x7ffff86d6bc0) at s3_srvr.c:506
#12 0x00007ffff383bf64 in SSL_accept (s=0x7ffff86d6bc0) at ssl_lib.c:869
#13 0x00007ffff382b199 in ssl23_get_client_hello (s=0x7ffff86d6bc0) at
s23_srvr.c:577
#14 0x00007ffff382a479 in ssl23_accept (s=0x7ffff86d6bc0) at s23_srvr.c:203
#15 0x00007ffff383bf64 in SSL_accept (s=0x7ffff86d6bc0) at ssl_lib.c:869
#16 0x00007ffff1160ab8 in ssl_io_filter_connect (filter_ctx=0x7ffff86d3368) at
/build/buildd/apache2-2.2.14/modules/ssl/ssl_engine_io.c:1103
#17 0x00007ffff1161a38 in ssl_io_filter_input (f=0x7ffff86dc3b8,
bb=0x7ffff86de9d8, mode=<value optimized out>, block=APR_BLOCK_READ,
readbytes=<value optimized out>) at
/build/buildd/apache2-2.2.14/modules/ssl/ssl_engine_io.c:1349
#18 0x00007ffff7fc9626 in ap_rgetline_core (s=0x7ffff86dd4a8, n=<value
optimized out>, read=<value optimized out>, r=<value optimized out>,
fold=<value optimized out>, bb=<value optimized out>) at
/build/buildd/apache2-2.2.14/server/protocol.c:231
#19 0x00007ffff7fc9fa6 in read_request_line (conn=0x7ffff86d2aa8) at
/build/buildd/apache2-2.2.14/server/protocol.c:596
#20 ap_read_request (conn=0x7ffff86d2aa8) at
/build/buildd/apache2-2.2.14/server/protocol.c:891
#21 0x00007ffff7fe4490 in ap_process_http_connection (c=0x7ffff86d2aa8) at
/build/buildd/apache2-2.2.14/modules/http/http_core.c:183
#22 0x00007ffff7fddcf8 in ap_run_process_connection (c=0x7ffff86d2aa8) at
/build/buildd/apache2-2.2.14/server/connection.c:43
#23 0x00007ffff7fec037 in child_main (child_num_arg=<value optimized out>) at
/build/buildd/apache2-2.2.14/server/mpm/prefork/prefork.c:662
#24 0x00007ffff7fec306 in make_child (s=0x7ffff8214938, slot=0) at
/build/buildd/apache2-2.2.14/server/mpm/prefork/prefork.c:702
#25 0x00007ffff7fec953 in ap_mpm_run (_pconf=<value optimized out>, plog=<value
optimized out>, s=<value optimized out>) at
/build/buildd/apache2-2.2.14/server/mpm/prefork/prefork.c:978
#26 0x00007ffff7fc2350 in main (argc=4, argv=0x7fffffffe728) at
/build/buildd/apache2-2.2.14/server/main.c:742
(gdb) f 1
#1 0x00007ffff1e7c7cf in engine_unlocked_init (e=0x7ffff8641180) at
eng_init.c:67
67 to_return = e->init(e);
(gdb) print *e
$19 = {id = 0x2 <Address 0x2 out of bounds>, name = 0x7ffff1eff31c "des-cbc",
rsa_meth = 0x7ffff214e2c0, dsa_meth = 0x31, dh_meth = 0x7fff00000090, ecdh_meth
= 0x7ffff2149d20, ecdsa_meth = 0x7ffff214ea60, rand_meth = 0x7ffff1eec806,
store_meth = 0x0, ciphers = 0x31, digests = 0x7fff00000091, destroy =
0x7ffff2149d80 <r4_40_cipher>, init = 0x7ffff214ea60 <sha1_md>, finish =
0x7ffff1eec806 <PKCS12_PBE_keyivgen>, ctrl = 0x7ffff1e80278 <dynamic_ctrl>,
load_privkey = 0x31, load_pubkey = 0x7fff00000092, load_ssl_client_cert =
0x7ffff2149ae0 <des_ede3_cbc>, cmd_defns = 0x7ffff214ea60, flags = -236009466,
struct_ref = 32767, funct_ref = 0, ex_data = {sk = 0x21, dummy = -146014162},
prev = 0x7ffff74c7ea8, next = 0x20}
(gdb) print cipher_table
$20 = (ENGINE_TABLE *) 0x7ffff8641250
(gdb) print *cipher_table
$21 = {piles = {b = 0x7ffff861ea90, comp = 0x7ffff1e7d602
<engine_pile_cmp_LHASH_COMP>, hash = 0x7ffff1e7d5e0
<engine_pile_hash_LHASH_HASH>, num_nodes = 8, num_alloc_nodes = 16, p = 0, pmax
= 8, up_load = 512, down_load = 256, num_items = 12, num_expands = 0,
num_expand_reallocs = 0, num_contracts = 0, num_contract_reallocs = 0,
num_hash_calls = 25, num_comp_calls = 1, num_insert = 12, num_replace = 0,
num_delete = 0, num_no_delete = 0, num_retrieve = 1, num_retrieve_miss = 12,
num_hash_comps = 10, error = 0}}
(gdb) l
62 int to_return = 1;
63
64 if((e->funct_ref == 0) && e->init)
65 /* This is the first functional reference and the engine
66 * requires initialisation so we do it now. */
67 to_return = e->init(e);
68 if(to_return)
69 {
70 /* OK, we return a functional reference which is also a
71 * structural reference. */
(gdb) q
A debugging session is active.
Inferior 1 [process 21725] will be killed.
Quit anyway? (y or n)
