Bug 43865 - ssl_engine_vars.c initializes a static variable with memory from the configuration pool which is later released
Summary: ssl_engine_vars.c initializes a static variable with memory from the configur...
Status: RESOLVED DUPLICATE of bug 43334
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_ssl (show other bugs)
Version: 2.2.6
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
: 44180 (view as bug list)
Depends on:
Blocks:
 
Reported: 2007-11-14 14:38 UTC by Michael Durket
Modified: 2008-01-08 02:51 UTC (History)
1 user (show)


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Durket 2007-11-14 14:38:08 UTC 
In ssl_engine_vars.c at line 645, the static variable 'library' is initialized
(one time only) using memory obtained from a pool. The pool, as 
it turs out, is the configuration record pool (pconf). That pool is cleared after 
phase 1 of module configuration, (but of course static variables are not) and so
the address pointed to by 'library' is no longer valid when the second phase of 
configuration takes place.

This leads to garbage data in the server_description field of Apache.

This bug is related to (and may be the cause of) bug #40146
Comment 1 Davi Arnaut 2007-11-15 04:16:56 UTC 
FWIW, It seems that this issue has already been fixed on trunk:

http://svn.apache.org/viewvc?view=rev&revision=591384

Proposed for backport:

http://svn.apache.org/viewvc?view=rev&revision=595286
Comment 2 Joe Orton 2007-11-16 02:40:05 UTC 
This was already fixed on the branches; r591384 was only a cleanup of the code used.

*** This bug has been marked as a duplicate of 43334 ***
Comment 3 Ruediger Pluem 2008-01-07 13:16:08 UTC 
*** Bug 44180 has been marked as a duplicate of this bug. ***
Comment 4 Christine Gonan 2008-01-07 14:07:07 UTC 
How can I fix this? If I leave it unresolved, is it affecting user traffic?  I 
have 4 servers, why doesn't this happen each time I restart the other servers.
Comment 5 Ruediger Pluem 2008-01-08 02:51:19 UTC 
(In reply to comment #4)
> How can I fix this? If I leave it unresolved, is it affecting user traffic?  I 
> have 4 servers, why doesn't this happen each time I restart the other servers.
> 

You can either apply the patch for the 2.2.x branch by yourself (see
http://svn.apache.org/viewvc?view=rev&revision=596683) or you wait for the next
2.2.x release which will hopefully available by the end of next week.