# 1.4.1 + spdy + centos 6 + openssl-1.0.1e (static), firefox 21 ajax requests ssl spdy = segfault

**URL:** <https://www.ruby-forum.com/t/1-4-1-spdy-centos-6-openssl-1-0-1e-static-firefox-21-ajax-requests-ssl-spdy-segfault/234933>\
**Category:** NGINX\
**Created:** [May 19, 2013, 6:44pm UTC](https://www.ruby-forum.com/t/1-4-1-spdy-centos-6-openssl-1-0-1e-static-firefox-21-ajax-requests-ssl-spdy-segfault/234933 "2013-05-19T18:44:06Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![addis\_a](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/c4cdca/32.png) [@addis\_a](https://www.ruby-forum.com/u/addis_a)\
**Post date:** [May 19, 2013, 6:44pm UTC](https://www.ruby-forum.com/t/1-4-1-spdy-centos-6-openssl-1-0-1e-static-firefox-21-ajax-requests-ssl-spdy-segfault/234933/1 "2013-05-19T18:44:06Z")

</div>

Hello, on one of my servers, nginx suddenly started crashing on some  
AJAX-heavy pages when accessed via SSL+SPDY. It seems to happen only  
when  
Firefox is the client (tested with Firefox 21), latest version of chrome  
uses SPDY without crashing.

uname -a:  
Linux [myserver.com](http://myserver.com) 2.6.32-358.6.2.el6.x86\_64 #1 SMP Thu May 16 20:59:36  
UTC  
2013 x86\_64 x86\_64 x86\_64 GNU/Linux

nginx compile flags:  
CFLAGS=“-g -O0” ./configure  
–with-pcre=/usr/local/src/nginx-1.4.1/pcre-8.32  
–sbin-path=/usr/local/sbin --conf-path=/etc/nginx/nginx.conf  
–pid-path=/var/run/nginx.pid --error-log-path=/var/log/nginx/error.log  
–http-log-path=/var/log/nginx/access.log --with-http\_realip\_module  
–with-http\_ssl\_module  
–with-openssl=/usr/local/src/nginx-1.4.1/openssl-1.0.1e  
–with-http\_spdy\_module --http-client-body-temp-path=/tmp/nginx\_client  
–http-proxy-temp-path=/tmp/nginx\_proxy  
–http-fastcgi-temp-path=/tmp/nginx\_fastcgi  
–with-http\_stub\_status\_module  
–with-debug

nginx log when crash happens:  
2013/05/19 18:05:58 [notice] 26737#0: start worker process 26899  
2013/05/19 18:05:58 [notice] 26737#0: signal 29 (SIGIO) received  
2013/05/19 18:05:59 [notice] 26737#0: signal 17 (SIGCHLD) received  
2013/05/19 18:05:59 [alert] 26737#0: worker process 26897 exited on  
signal  
11 (core dumped)  
2013/05/19 18:05:59 [notice] 26737#0: start worker process 26907  
2013/05/19 18:05:59 [notice] 26737#0: signal 29 (SIGIO) received  
2013/05/19 18:06:00 [notice] 26737#0: signal 17 (SIGCHLD) received  
2013/05/19 18:06:00 [alert] 26737#0: worker process 26899 exited on  
signal  
11 (core dumped)  
2013/05/19 18:06:00 [notice] 26737#0: start worker process 26909  
2013/05/19 18:06:00 [notice] 26737#0: signal 29 (SIGIO) received

nginx.conf

> **[nginx conf - Pastebin.com](https://pastebin.com/G9wAgyeh)**
>
> Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

gdb backtrace:

# gdb /usr/local/sbin/nginx core.26899

… snip gpl stuff …

Reading symbols from /usr/local/sbin/nginx…done.  
[New Thread 26899]  
Missing separate debuginfo for  
Try: yum --disablerepo=‘_’ --enablerepo='_-debug\*’ install  
/usr/lib/debug/.build-id/50/fc20fea18a6f375789f0f86e28f463d50714fd  
Reading symbols from /lib64/libpthread.so.0…(no debugging symbols  
found)…done.  
[Thread debugging using libthread\_db enabled]  
Loaded symbols for /lib64/libpthread.so.0  
Reading symbols from /lib64/libcrypt.so.1…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/libcrypt.so.1  
Reading symbols from /lib64/libdl.so.2…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/libdl.so.2  
Reading symbols from /lib64/libz.so.1…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/libz.so.1  
Reading symbols from /lib64/libc.so.6…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/libc.so.6  
Reading symbols from /lib64/ld-linux-x86-64.so.2…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/ld-linux-x86-64.so.2  
Reading symbols from /lib64/libfreebl3.so…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/libfreebl3.so  
Reading symbols from /lib64/libnss\_files.so.2…(no debugging symbols  
found)…done.  
Loaded symbols for /lib64/libnss\_files.so.2  
Core was generated by `nginx: worker process '.  
Program terminated with signal 11, Segmentation fault.  
#0 0x0000003455283c56 in \_\_memset\_sse2 () from /lib64/libc.so.6  
Missing separate debuginfos, use: debuginfo-install  
glibc-2.12-1.107.el6.x86\_64 nss-softokn-freebl-3.12.9-11.el6.x86\_64  
zlib-1.2.3-29.el6.x86\_64  
(gdb) bt  
#0 0x0000003455283c56 in \_\_memset\_sse2 () from /lib64/libc.so.6  
#1 0x0000000000493a67 in ngx\_http\_spdy\_state\_data (sc=0x3035ba0,  
pos=0x37c78f8 “”, end=0x37c78f8 “”)  
at src/http/ngx\_http\_spdy.c:1193  
#2 0x0000000000492673 in ngx\_http\_spdy\_state\_head (sc=0x3035ba0,  
pos=0x37c78f8 “”, end=0x37c78f8 “”)  
at src/http/ngx\_http\_spdy.c:699  
#3 0x00000000004919e2 in ngx\_http\_spdy\_read\_handler  
(rev=0x7f0318ffe3b8) at  
src/http/ngx\_http\_spdy.c:364  
#4 0x000000000042ac31 in ngx\_event\_process\_posted (cycle=0x2893a30,  
posted=0x8d1b68)  
at src/event/ngx\_event\_posted.c:40  
#5 0x000000000042887c in ngx\_process\_events\_and\_timers  
(cycle=0x2893a30) at  
src/event/ngx\_event.c:276  
#6 0x0000000000435ebd in ngx\_worker\_process\_cycle (cycle=0x2893a30,  
data=0x1)  
at src/os/unix/ngx\_process\_cycle.c:807  
#7 0x00000000004327ca in ngx\_spawn\_process (cycle=0x2893a30,  
proc=0x435cf7  
\<ngx\_worker\_process\_cycle\>,  
data=0x1, name=0x609c9b “worker process”, respawn=1) at  
src/os/unix/ngx\_process.c:198  
#8 0x0000000000435906 in ngx\_reap\_children (cycle=0x2893a30) at  
src/os/unix/ngx\_process\_cycle.c:619  
#9 0x00000000004345ed in ngx\_master\_process\_cycle (cycle=0x2893a30) at  
src/os/unix/ngx\_process\_cycle.c:180  
#10 0x00000000004041b6 in main (argc=3, argv=0x7fffb6c2dbd8) at  
src/core/nginx.c:412

Server has a Core i3 540 with HT, OS is 64-bit CentOS 6 fully patched  
(as of  
date of this message).

- kernel log when error occurred:  
May 19 18:06:00 saruman kernel: nginx[26899]: segfault at 0 ip  
0000003455283c56 sp 00007fffb6c2d498 error 6 in  
libc-2.12.so[3455200000+18a000]

The crash is highly reproducible and when it crashes the ip and sp  
parameters and offsets are always the same.

I hope I’ve posted enough info for devs to fix this, sorry for the long  
message.

Posted at Nginx Forum:

> **[\[nginx\] 1.4.1 + spdy + centos 6 + openssl-1.0.1e (static), firefox 21 ajax...](https://forum.nginx.org/read.php?2,239327,239327#msg-239327)**
>
> Hello, on one of my servers, nginx suddenly started crashing on some AJAX-heavy pages when accessed via SSL+SPDY. It seems to happen only when Firefox is the client (tested with Firefox 21), latest version of chrome uses SPDY without crashing. uname...

---

<div class="post-metadata">

**Author:** ![epsilon2930](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/919ad9/32.png) [@epsilon2930](https://www.ruby-forum.com/u/epsilon2930)\
**Post date:** [May 20, 2013, 3:21am UTC](https://www.ruby-forum.com/t/1-4-1-spdy-centos-6-openssl-1-0-1e-static-firefox-21-ajax-requests-ssl-spdy-segfault/234933/2 "2013-05-20T03:21:11Z")

</div>

For closure: I took this to the bug tracker and a patch was posted that  
resolves this issue:  
[http://trac.nginx.org/nginx/ticket/357](http://trac.nginx.org/nginx/ticket/357)

Apologies for newsletter spam.

Posted at Nginx Forum:

> **[Re: \[nginx\] 1.4.1 + spdy + centos 6 + openssl-1.0.1e (static), firefox 21...](https://forum.nginx.org/read.php?2,239327,239331#msg-239331)**
>
> Hello, on one of my servers, nginx suddenly started crashing on some AJAX-heavy pages when accessed via SSL+SPDY. It seems to happen only when Firefox is the client (tested with Firefox 21), latest version of chrome uses SPDY without crashing. uname...
