[Bug 472318] [NEW] apache segfaults when performing stress test

Jimmy Bergman jimmy at sigint.se
Tue Nov 3 08:17:59 GMT 2009


Public bug reported:

Binary package hint: libapache2-mod-perl2

Description:    Ubuntu 9.10
Release:        9.10

libapache2-mod-perl2:
  Installed: 2.0.4-5ubuntu1
  Candidate: 2.0.4-5ubuntu1
  Version table:
     2.0.4-5ubuntu1 0
        500 http://se.archive.ubuntu.com karmic/main Packages
 *** 2.0.4-5ubuntu1 0
        100 /var/lib/dpkg/status

I originally had this problem on hardy, but upgraded to karmic to check
if it was fixed in 2.0.4.

When performing a large number of requests on my mod_perl2 application
which use Apache::SOAP from SOAP::Lite I get reproduceable segfaults
(happens every time, but after different amounts of time).

The exact cause of the crash is different, but it is always due to memory management bugs caught by glibc. One example stack trace is:
*** glibc detected *** /usr/sbin/apache2: free(): invalid pointer: 0xbae175b8 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb76d6ff1]
/lib/tls/i686/cmov/libc.so.6[0xb76d86f2]
/lib/tls/i686/cmov/libc.so.6(cfree+0x6d)[0xb76db79d]
/usr/lib/libperl.so.5.10(Perl_safesysfree+0x21)[0xb74a8f71]
/usr/lib/libperl.so.5.10(Perl_sv_clear+0x5e0)[0xb74dd810]
/usr/lib/libperl.so.5.10(Perl_sv_free2+0x58)[0xb74dd9f8]
/usr/lib/libperl.so.5.10(Perl_sv_free+0xae)[0xb74ddaee]
/usr/lib/libperl.so.5.10[0xb74dde3b]
/usr/lib/libperl.so.5.10[0xb74d2082]
/usr/lib/libperl.so.5.10(Perl_sv_clean_all+0x3d)[0xb74d215d]
/usr/lib/libperl.so.5.10(perl_destruct+0xbf1)[0xb74c78f1]
/usr/lib/apache2/modules/mod_perl.so(modperl_perl_destruct+0x90)[0xb75ac0a0]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_destroy+0x55)[0xb759b555]
/usr/lib/apache2/modules/mod_perl.so[0xb759b5bd]
/usr/lib/apache2/modules/mod_perl.so[0xb759be3f]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_unselect+0x85)[0xb759b0c5]
/usr/lib/libapr-1.so.0[0xb77e1ed8]
/usr/lib/libapr-1.so.0(apr_pool_destroy+0x5c)[0xb77e10f8]
/usr/lib/libapr-1.so.0(apr_pool_clear+0x44)[0xb77e0fe6]
/usr/sbin/apache2[0xb78bea08]
/usr/lib/libapr-1.so.0[0xb77ed81d]
/lib/tls/i686/cmov/libpthread.so.0[0xb77b580e]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb77387ee]

One other was:
[Sun Oct 25 07:49:04 2009] [notice] child pid 19841 exit signal Segmentation fault (11)
*** glibc detected *** /usr/sbin/apache2: double free or corruption (out): 0x090b3fd0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7e37a85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7e3b4f0]
/usr/lib/libperl.so.5.8(Perl_safesysfree+0x21)[0xb76d9421]
/usr/lib/libperl.so.5.8(Perl_sv_clear+0x5d0)[0xb76f5b20]
/usr/lib/libperl.so.5.8(Perl_sv_free+0x112)[0xb76f5ef2]
/usr/lib/libperl.so.5.8[0xb76f649b]
/usr/lib/libperl.so.5.8[0xb76f0800]
/usr/lib/libperl.so.5.8(Perl_sv_clean_all+0x37)[0xb76f08d7]
/usr/lib/libperl.so.5.8(perl_destruct+0xbf4)[0xb768cf44]
/usr/lib/apache2/modules/mod_perl.so(modperl_perl_destruct+0x90)[0xb77a6bd0]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_destroy+0x55)[0xb7796695]
/usr/lib/apache2/modules/mod_perl.so[0xb77966fd]
/usr/lib/apache2/modules/mod_perl.so[0xb7796f6f]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_unselect+0x9f)[0xb779623f]
/usr/lib/libapr-1.so.0[0xb7f47bad]
/usr/lib/libapr-1.so.0(apr_pool_destroy+0x3d)[0xb7f4830d]
/usr/lib/libapr-1.so.0(apr_pool_clear+0x28)[0xb7f484e8]
/usr/sbin/apache2[0x808ee0a]
/usr/lib/libapr-1.so.0[0xb7f51a76]
/lib/tls/i686/cmov/libpthread.so.0[0xb7f204fb]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7ea2e5e]

A third was:
*** glibc detected *** /usr/sbin/apache2: double free or corruption (!prev): 0x0a98e1a8 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7e37a85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7e3b4f0]
/usr/lib/libperl.so.5.8(Perl_safesysfree+0x21)[0xb76d9421]
/usr/lib/libperl.so.5.8(Perl_sv_clear+0x5d0)[0xb76f5b20]
/usr/lib/libperl.so.5.8(Perl_sv_free+0x112)[0xb76f5ef2]
/usr/lib/libperl.so.5.8[0xb76f649b]
/usr/lib/libperl.so.5.8[0xb76f0800]
/usr/lib/libperl.so.5.8(Perl_sv_clean_all+0x37)[0xb76f08d7]
/usr/lib/libperl.so.5.8(perl_destruct+0xbf4)[0xb768cf44]
/usr/lib/apache2/modules/mod_perl.so(modperl_perl_destruct+0x90)[0xb77a6bd0]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_destroy+0x55)[0xb7796695]
/usr/lib/apache2/modules/mod_perl.so[0xb77966fd]
/usr/lib/apache2/modules/mod_perl.so[0xb7796f6f]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_unselect+0x9f)[0xb779623f]
/usr/lib/libapr-1.so.0[0xb7f47bad]
/usr/lib/libapr-1.so.0(apr_pool_destroy+0x3d)[0xb7f4830d]
/usr/lib/libapr-1.so.0(apr_pool_clear+0x28)[0xb7f484e8]
/usr/sbin/apache2[0x808ee0a]
/usr/lib/libapr-1.so.0[0xb7f51a76]
/lib/tls/i686/cmov/libpthread.so.0[0xb7f204fb]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7ea2e5e]

And another one:
[Sun Oct 25 19:20:43 2009] [notice] child pid 31485 exit signal Aborted (6)
*** glibc detected *** /usr/sbin/apache2: munmap_chunk(): invalid pointer: 0x0a8e8e88 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(cfree+0x1bb)[0xb7e3b61b]
/usr/lib/libperl.so.5.8(Perl_safesysfree+0x21)[0xb76d9421]
/usr/lib/libperl.so.5.8(Perl_sv_clear+0x5d0)[0xb76f5b20]
/usr/lib/libperl.so.5.8(Perl_sv_free+0x112)[0xb76f5ef2]
/usr/lib/libperl.so.5.8[0xb76f649b]
/usr/lib/libperl.so.5.8[0xb76f0800]
/usr/lib/libperl.so.5.8(Perl_sv_clean_all+0x37)[0xb76f08d7]
/usr/lib/libperl.so.5.8(perl_destruct+0xbf4)[0xb768cf44]
/usr/lib/apache2/modules/mod_perl.so(modperl_perl_destruct+0x90)[0xb77a6bd0]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_destroy+0x55)[0xb7796695]
/usr/lib/apache2/modules/mod_perl.so[0xb77966fd]
/usr/lib/apache2/modules/mod_perl.so[0xb7796f6f]
/usr/lib/apache2/modules/mod_perl.so(modperl_interp_unselect+0x9f)[0xb779623f]
/usr/lib/libapr-1.so.0[0xb7f47bad]
/usr/lib/libapr-1.so.0(apr_pool_destroy+0x3d)[0xb7f4830d]
/usr/lib/libapr-1.so.0(apr_pool_clear+0x28)[0xb7f484e8]
/usr/sbin/apache2[0x808ee0a]
/usr/lib/libapr-1.so.0[0xb7f51a76]
/lib/tls/i686/cmov/libpthread.so.0[0xb7f204fb]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7ea2e5e]

The crash always happen somewhere below modperl_perl_destruct, and it looks like something
garbles the perl interpretor structure since there are different invalid pointers almost every time. 

So far I failed to find the misbehaving code though.

I have since these stacktraces recompiled mod_perl2 with debugging
symbols and done the same tests with gdb attached.

Some gdb output is:
*** glibc detected *** /usr/sbin/apache2: munmap_chunk(): invalid pointer: 0xbabc8f90 ***
*snip*

(gdb) bt
#0  0xb7f7c430 in __kernel_vsyscall ()
#1  0xb7dc24d1 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2  0xb7dc5932 in *__GI_abort () at abort.c:92
#3  0xb7df8ee5 in __libc_message (do_abort=2, fmt=0xb7ebc438 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#4  0xb7e02ff1 in malloc_printerr (action=<value optimized out>, str=0x6 <Address 0x6 out of bounds>, ptr=0xbabc8f90) at malloc.c:6217
#5  0xb7e041f5 in munmap_chunk (p=<value optimized out>) at malloc.c:3518
#6  0xb7bd4f71 in Perl_safesysfree () from /usr/lib/libperl.so.5.10
#7  0xb7c09810 in Perl_sv_clear () from /usr/lib/libperl.so.5.10
#8  0xb7c099f8 in Perl_sv_free2 () from /usr/lib/libperl.so.5.10
#9  0xb7c09aee in Perl_sv_free () from /usr/lib/libperl.so.5.10
#10 0xb7c09e3b in ?? () from /usr/lib/libperl.so.5.10
#11 0xb7bfe082 in ?? () from /usr/lib/libperl.so.5.10
#12 0xb7bfe15d in Perl_sv_clean_all () from /usr/lib/libperl.so.5.10
#13 0xb7bf38f1 in perl_destruct () from /usr/lib/libperl.so.5.10
#14 0xb7cd947e in modperl_perl_destruct (perl=0xb82440a8) at modperl_perl.c:176
#15 0xb7cc85b3 in modperl_interp_destroy (interp=0xb8242868) at modperl_interp.c:146
#16 0xb7cc861d in interp_pool_shrink (tipool=0xb81a6e28, data=0xb81a6e18, item=0xb8242868) at modperl_interp.c:218
#17 0xb7cc8e9b in modperl_tipool_putback_base (tipool=0xb81a6e28, listp=0xb81d2a10, data=0xb8242868, num_requests=2001) at modperl_tipool.c:359
#18 0xb7cc8115 in modperl_interp_unselect (data=0xb8242868) at modperl_interp.c:296
#19 0xb7f0ded8 in ?? () from /usr/lib/libapr-1.so.0
#20 0xb7f0d0f8 in apr_pool_destroy () from /usr/lib/libapr-1.so.0
#21 0xb7f0cfe6 in apr_pool_clear () from /usr/lib/libapr-1.so.0
#22 0xb7feba08 in ?? () from /usr/sbin/apache2
#23 0xb7f1981d in ?? () from /usr/lib/libapr-1.so.0
#24 0xb7ee180e in start_thread (arg=0xada74b70) at pthread_create.c:300
#25 0xb7e647ee in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

(gdb) frame 14
#14 0xb7cd947e in modperl_perl_destruct (perl=0xb82440a8) at modperl_perl.c:176
176         perl_destruct(perl);

(gdb) info args
perl = 0xb82440a8

(gdb) info locals
module_commands = 0x0

(gdb) info registers
eax            0x0      0
ecx            0x47a0   18336
edx            0x6      6
ebx            0xb7ce9ff4       -1211195404
esp            0xada74140       0xada74140
ebp            0xada74168       0xada74168
esi            0xb82440a8       -1205583704
edi            0xb8244393       -1205582957
eip            0xb7cd947e       0xb7cd947e <modperl_perl_destruct+142>
eflags         0x206    [ PF IF ]
cs             0x73     115
ss             0x7b     123
ds             0x7b     123
es             0x7b     123
fs             0x0      0
gs             0x33     51

(gdb) x/16i $pc
0xb7cd947e <modperl_perl_destruct+142>: mov    %esi,(%esp)
0xb7cd9481 <modperl_perl_destruct+145>: call   0xb7cc44f8 <perl_free at plt>
0xb7cd9486 <modperl_perl_destruct+150>: mov    -0xc(%ebp),%ebx
0xb7cd9489 <modperl_perl_destruct+153>: mov    -0x8(%ebp),%esi
0xb7cd948c <modperl_perl_destruct+156>: mov    -0x4(%ebp),%edi
0xb7cd948f <modperl_perl_destruct+159>: mov    %ebp,%esp
0xb7cd9491 <modperl_perl_destruct+161>: pop    %ebp
0xb7cd9492 <modperl_perl_destruct+162>: ret
0xb7cd9493 <modperl_perl_destruct+163>: lea    -0x3376(%ebx),%edx
0xb7cd9499 <modperl_perl_destruct+169>: mov    %eax,0x4(%esp)
0xb7cd949d <modperl_perl_destruct+173>: lea    -0x4654(%ebx),%eax
0xb7cd94a3 <modperl_perl_destruct+179>: movl   $0x8c,0xc(%esp)
0xb7cd94ab <modperl_perl_destruct+187>: mov    %edx,0x8(%esp)
0xb7cd94af <modperl_perl_destruct+191>: mov    %eax,(%esp)
0xb7cd94b2 <modperl_perl_destruct+194>: call   0xb7cc5d78 <Perl_croak_nocontext at plt>

(gdb) print *perl
$1 = {Istack_sp = 0xb8bfa0a0, Iop = 0x0, Icurpad = 0x0, Istack_base = 0xb8bfa0a0, Istack_max = 0xb8bfa88c, Iscopestack = 0xb8705e18, Iscopestack_ix = 0, Iscopestack_max = 108,
  Isavestack = 0xb87456c0, Isavestack_ix = 0, Isavestack_max = 2314, Itmps_stack = 0xb86d0bb8, Itmps_ix = -1, Itmps_floor = -1, Itmps_max = 4608, Imodcount = 1073751825, Imarkstack = 0xb81938f8,
  Imarkstack_ptr = 0xb81938f8, Imarkstack_max = 0xb8193a18, ISv = 0xb882e960, IXpv = 0x0, Ina = 0, Istatbuf = {st_dev = 11, __pad1 = 0, st_ino = 3, st_mode = 8592, st_nlink = 1, st_uid = 1000,
    st_gid = 5, st_rdev = 34816, __pad2 = 0, st_size = 0, st_blksize = 0, st_blocks = 1024, st_atim = {tv_sec = 0, tv_nsec = 0}, st_mtim = {tv_sec = 1257235440, tv_nsec = 351472401}, st_ctim = {
      tv_sec = 1257235441, tv_nsec = 435431972}, __unused4 = 1257233485, __unused5 = 407431457}, Istatcache = {st_dev = 3, __pad1 = 2049, st_ino = 0, st_mode = 0, st_nlink = 253423,
    st_uid = 33188, st_gid = 1, st_rdev = 0, __pad2 = 0, st_size = 0, st_blksize = 0, st_blocks = 38560, st_atim = {tv_sec = 0, tv_nsec = 4096}, st_mtim = {tv_sec = 80, tv_nsec = 0}, st_ctim = {
      tv_sec = 1257173131, tv_nsec = 0}, __unused4 = 1254437908, __unused5 = 0}, Istatgv = 0x4aeaee7c, Istatname = 0x0, Itimesbuf = {tms_utime = 253423, tms_stime = 0, tms_cutime = 0,
    tms_cstime = 0}, Icurpm = 0x0, Irs = 0x0, Ilast_in_gv = 0x0, Iofs_sv = 0x0, Idefoutgv = 0x0, Ichopset = 0x0, Iformtarget = 0x0, Ibodytarget = 0x0, Itoptarget = 0x0, Idefstash = 0xb7c90ffc,
  Icurstash = 0x0, Irestartop = 0x0, Icurcop = 0x0, Icurstack = 0x0, Icurstackinfo = 0xb81bd020, Imainstack = 0x0, Itop_env = 0xb82444cc, Istart_env = {je_prev = 0xb8228270, je_buf = {{
        __jmpbuf = {-1205687640, -1205697936, -1205583332, 0, 0, 0}, __mask_was_saved = 0, __saved_mask = {__val = {0 <repeats 32 times>}}}}, je_ret = 0, je_mustcatch = 0 '\000'}, Ierrors = 0x0,
  Ihv_fetch_ent_mh = 0x0, Ilastgotoprobe = 0xffffffff, Isortcop = 0x1, Isortstash = 0x0, Ifirstgv = 0xb8537908, Isecondgv = 0x0, Iefloatbuf = 0x0, Iefloatsize = 0, Iscreamfirst = 0x0,
  Iscreamnext = 0x0, Ilastscream = 0x0, Ireg_state = {re_state_reg_flags = 0, re_state_reg_start_tmpl = 0, re_state_reg_eval_set = 0, re_state_reg_match_utf8 = 0 '\000', re_state_bostr = 0x0,
    re_state_reginput = 0x4 <Address 0x4 out of bounds>, re_state_regeol = 0x0, re_state_regoffs = 0x0, re_state_reglastparen = 0xb8d70ee8, re_state_reglastcloseparen = 0xb8d70ef2,
    re_state_reg_start_tmp = 0xb8d70efc, re_state_reg_magic = 0xb822a080, re_state_reg_oldcurpm = 0xb822a048, re_state_reg_curpm = 0xb822a04c,
    re_state_reg_oldsaved = 0xb8274f80 "\320\223\355\267\230\245\323\270\245\251\323\270\255\227]\270d}) !", re_state_reg_oldsavedlen = 0, re_state_reg_poscache_size = 0, re_state_reg_oldpos = 0,
    re_state_reg_maxiter = 0, re_state_reg_leftiter = 0, re_state_regsize = 0, re_state_reg_poscache = 0x0, re_state_reg_starttry = 0x0}, Iregdummy = {flags = 218 '\332', type = 1 '\001',
    next_off = 0}, Idumpindent = 0, Iutf8locale = 0 '\000', Irehash_seed_set = 0 '\000', Icolors = {0x0, 0x0, 0x0, 0x4 <Address 0x4 out of bounds>, 0x0, 0x0}, Ipeepp = 0, Imaxscream = 0,
  Ireginterp_cnt = 0, Iwatchaddr = 0x0, Iwatchok = 0xb7ba6040 "U\211\345WVS\201\354\234", Iregmatch_slab = 0xffffffff, Iregmatch_state = 0x0, Idelaymagic = 0, Ilocalizing = 0 '\000',
  Icolorset = 0 '\000', Idirty = 0 '\000', Iin_eval = 0 '\000', Itainted = 0 '\000', Iperl_destruct_level = 0 '\000', Iperldb = 3089674344, Iorigargc = -1205292952, Iorigargv = 0x0,
  Ienvgv = 0x2000001, Iincgv = 0x0, Ihintgv = 0x2, Iorigfilename = 0xb809f758 "W\371\377\277", Idiehook = 0x0, Iwarnhook = 0x0, Ipatchlevel = 0x0, Ilocalpatches = 0xb8217540, Isplitstr = 0x0,
  Iminus_c = 0 '\000', Ipreprocess = 0 '\000', Iminus_n = 0 '\000', Iminus_p = 0 '\000', Iminus_l = -40 '\330', Iminus_a = 25 '\031', Iminus_F = 34 '"', Idoswitches = -72 '\270',
  Iminus_E = -72 '\270', Idowarn = 37 '%', Idoextract = -55 '\311', Isawampersand = -73 '\267', Iunsafe = -81 '\257', Iexit_flags = 230 '\346', Isrand_called = -56 '\310', Itainting = -73 '\267',
  Iinplace = 0x0, Ie_script = 0x0, Ibasetime = 0, Iformfeed = 0x0, Imaxsysfd = 0, Istatusvalue = 0, Istatusvalue_posix = 1257235441, Isig_pending = -1202662776, Ipsig_pend = 0x2, Istdingv = 0x0,
  Istderrgv = 0x0, Idefgv = 0x0, Iargvgv = 0xb822a760, Iargvoutgv = 0x0, Iargvout_stack = 0x0, Ireplgv = 0xb81c9150, Ierrgv = 0x0, IDBgv = 0x0, IDBline = 0x0, IDBsub = 0x0, IDBsingle = 0x0,
  IDBtrace = 0x0, IDBsignal = 0x0, Idbargs = 0x0, Idebstash = 0x0, Iglobalstash = 0x0, Icurstname = 0x0, Ibeginav = 0x0, Iendav = 0x0, Iunitcheckav = 0xb81bdc80, Icheckav = 0x0, Iinitav = 0x0,
  Istrtab = 0x0, Isub_generation = 0, Iforkprocess = 0, Isv_count = 0, Isv_objcount = -1206136848, Isv_root = 0x6, Isv_arenaroot = 0x1, Ifdpid = 0x1bc4f, Iop_mask = 0x0, Imain_cv = 0xb82281e0,
  Imain_root = 0xb86b1a48, Imain_start = 0xb82281f0, Ieval_root = 0x0, Ieval_start = 0x0, Icurcopdb = 0x0, Ifilemode = 0, Ilastfd = 0, Ioldname = 0xbabbfaa0 "soap/encoding/}arrayType",
  IArgv = 0x0, ICmd = 0x0, Ipreambleav = 0x0, Imess_sv = 0x0, Iors_sv = 0x0, Igensym = 0, Icv_has_eval = 0 '\000', Itaint_warn = 0 '\000', Ilaststype = 0, Ilaststatval = -1196436936,
  Iexitlistlen = 0, Iexitlist = 0xfa2, Imodglobal = 0xf70000, Iprofiledata = 0xffffffff, Icompiling = {op_next = 0x0, op_sibling = 0x0, op_ppaddr = 0, op_targ = 0, op_type = 0, op_opt = 0,
    op_latefree = 0, op_latefreed = 0, op_attached = 0, op_spare = 0, op_flags = 0 '\000', op_private = 0 '\000', cop_line = 0, cop_label = 0x0, cop_stashpv = 0x0, cop_file = 0x0, cop_hints = 0,
    cop_seq = 0, cop_warnings = 0xb8242f80, cop_hints_hash = 0x0}, Icompcv = 0x702, Icomppad = 0x0, Icomppad_name = 0x0, Icomppad_name_fill = 0, Icomppad_name_floor = 0, IDBcv = 0x0,
  Igeneration = 0, Iin_clean_objs = -1 '\377', Iin_clean_all = -1 '\377', Inomemok = -1 '\377', Isavebegin = -1 '\377', Iuid = 0, Ieuid = 0, Igid = 1660, Iegid = 256, Ian = 33, Icop_seqmax = 33,
  Ievalseq = 33, Iorigalen = 33, Iorigenviron = 0x0, Iosname = 0xa9bb <Address 0xa9bb out of bounds>, Isighandlerp = 0x6e0b, Ibody_roots = {0x12, 0xbffff828, 0x0, 0xb7bda350, 0xb83dc3d4, 0x0,
    0xb81c6404, 0xb826dae0, 0x0, 0xb81c3e38, 0xb8269180, 0xb8f47710, 0xb8b704c0, 0xb821f044, 0xb828dfb8, 0xb8623484}, Inice_chunk = 0xb81be370 "$\356\033\270\a", Inice_chunk_size = 3100704320,
  Imaxo = 0, Irunops = 0xb81c5844, Isv_undef = {sv_any = 0x0, sv_refcnt = 0, sv_flags = 362, sv_u = {svu_iv = -1212202432, svu_uv = 3082764864, svu_rv = 0xb7bf4240,
      svu_pv = 0xb7bf4240 "U\211\345VS\350\335y\370\377\201\303\252\315\v", svu_array = 0xb7bf4240, svu_hash = 0xb7bf4240, svu_gp = 0xb7bf4240}}, Isv_no = {sv_any = 0x0, sv_refcnt = 2147135982,
    sv_flags = 134217728, sv_u = {svu_iv = 0, svu_uv = 0, svu_rv = 0x0, svu_pv = 0x0, svu_array = 0x0, svu_hash = 0x0, svu_gp = 0x0}}, Isv_yes = {sv_any = 0xb81bbfe8, sv_refcnt = 2147483644,
    sv_flags = 134379271, sv_u = {svu_iv = -1205591944, svu_uv = 3089375352, svu_rv = 0xb8242078, svu_pv = 0xb8242078 "", svu_array = 0xb8242078, svu_hash = 0xb8242078, svu_gp = 0xb8242078}},
  Isubname = 0xb81bbffc, Isubline = 2147465087, Imin_intro_pending = 134248199, Imax_intro_pending = -1205781960, Ipadix = 0, Ipadix_floor = 0, Ipad_reset_pending = 0, Ihints = 0, Idebug = 0,
  Iamagic_generation = 0, Icollation_name = 0x0, Icollxfrm_base = 0, Icollxfrm_mult = 0, Icollation_ix = 9, Icollation_standard = 0 '\000', Iutf8cache = 0 '\000', Inumeric_standard = 0 '\000',
  Inumeric_local = 0 '\000', Inumeric_name = 0x0, Iutf8_alnum = 0x1, Iutf8_alnumc = 0x1, Iutf8_ascii = 0x1010001, Iutf8_alpha = 0x0, Iutf8_space = 0x0, Iutf8_cntrl = 0x0, Iutf8_graph = 0x0,
  Iutf8_digit = 0x0, Iutf8_upper = 0x0, Iutf8_lower = 0x0, Iutf8_print = 0x0, Iutf8_punct = 0x0, Iutf8_xdigit = 0x0, Iutf8_mark = 0x0, Iutf8_toupper = 0x0, Iutf8_totitle = 0x0,
  Iutf8_tolower = 0x0, Iutf8_tofold = 0x0, Ilast_swash_hv = 0x0, Ilast_swash_tmps = 0x0, Ilast_swash_slen = 0, Ilast_swash_key = "\000\000\000\000\020\065i\270\240\314",
  Ilast_swash_klen = 34 '"', Iglob_index = 512, Iparser = 0x0, Ibitcount = 0x0, Ipsig_ptr = 0x0, Ipsig_name = 0x1, Iptr_table = 0x0, Ibeginav_save = 0x0, Ibody_arenas = 0xb822a878,
  Inumeric_radix_sv = 0xb822a990, Iregex_pad = 0x0, Iregex_padav = 0x0, Ireentrant_buffer = 0xb8caba90, Icustom_op_names = 0x0, Icustom_op_descs = 0x0, Iperlio = 0x0, Iknown_layers = 0xb8204298,
  Idef_layerlist = 0x0, Iencoding = 0x0, Idebug_pad = {pad = {{sv_any = 0xb82048b8, sv_refcnt = 3089122440, sv_flags = 3089165784, sv_u = {svu_iv = 0, svu_uv = 0, svu_rv = 0x0, svu_pv = 0x0,
          svu_array = 0x0, svu_hash = 0x0, svu_gp = 0x0}}, {sv_any = 0xb81c3dd8, sv_refcnt = 0, sv_flags = 17413, sv_u = {svu_iv = -1205766776, svu_uv = 3089200520, svu_rv = 0xb8217588,
          svu_pv = 0xb8217588 "", svu_array = 0xb8217588, svu_hash = 0xb8217588, svu_gp = 0xb8217588}}, {sv_any = 0xb81c3de0, sv_refcnt = 0, sv_flags = 17413, sv_u = {svu_iv = -1205766760,
          svu_uv = 3089200536, svu_rv = 0xb8217598, svu_pv = 0xb8217598 "", svu_array = 0xb8217598, svu_hash = 0xb8217598, svu_gp = 0xb8217598}}}}, Iutf8_idstart = 0xb81c3de8, Iutf8_idcont = 0x0,
  Isort_RealCmp = 0x4405, Icheckav_save = 0xb82175a8, Iunitcheckav_save = 0x0, Iclocktick = 0, Iin_load_module = 0, Iunicode = 0, Isignals = 0, Ireentrant_retint = 100, Istashcache = 0x0,
  Isharehook = 0, Ilockhook = 0, Iunlockhook = 0, Ithreadhook = 0, Ihash_seed = 3082628144, Irehash_seed = 3082628144, Iisarev = 0xb7c72bd0, Imy_cxt_size = -1212237872, Imy_cxt_list = 0x0,
  Idestroyhook = 0xfe1fc07b}

Attached to the bug report is the output of running the test with apache
under valgrind.

I can reproduce the bug if needed, and perform any action needed for
someone to be able to pinpoint the cause.

Thanks in advance for any help, it would be greatly appreciated.

** Affects: libapache2-mod-perl2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
apache segfaults when performing stress test
https://bugs.launchpad.net/bugs/472318
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libapache2-mod-perl2 in ubuntu.



More information about the Ubuntu-server-bugs mailing list