Uploaded image for project: 'Traffic Server'
  1. Traffic Server
  2. TS-5098

Sig 11: Segmentation fault on TLS when destination server issues Reset

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: 7.1.0
    • Component/s: TLS
    • Labels:

      Description

      On HEAD as of 16DEC2016 (102b66b9730780289ef71fa1ee33214cbcbcdde2)
      When in Forward proxy mode, connecting to an HTTPS site, where the destination site responds with TCP RESET, Traffic Server will restart due to Sig 11: Segmentation fault.
      If the upstream site instead silently drops the response, ATS will successfully proceed with 502 (Tunnel Connection Failed).
      No proxy chaining involved, direct: client -> ATS -> destination.
      Test machine: Debian Jessie (8.6) x86_64

      To replicate, make an HTTPS request - via ATS in forward-proxy-mode - to a local (non-firewalled) server, with nothing running on TCP/443.
      Watch manager.log for near immediate "[LocalManager::pollMgmtProcessServer] Server Process terminated due to Sig 11: Segmentation fault" followed by "[Alarms::signalAlarm] Server Process was reset"

      The issue was introduced in c1ac5f8bf87fd4bc3a8e06507219970d83965acd TS-4796

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                jacksontj Thomas Jackson
                Reporter:
                craigba Craig B
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated: