DO NOT REPLY [Bug 31066] New: - mod_ssl gets in an endless loop in ssl_init_ModuleKill()

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=31066>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31066

mod_ssl gets in an endless loop in ssl_init_ModuleKill()

           Summary: mod_ssl gets in an endless loop in ssl_init_ModuleKill()
           Product: Apache httpd-2.0
           Version: 2.0.49
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: jukkaho@mail.student.oulu.fi


In Apache/2.0.49 (Gentoo/Linux) mod_ssl/2.0.49 OpenSSL/0.9.7d DAV/2 SVN/1.0.6
PHP/4.3.8 in AMD64 platform under certain conditions apache2 process ends up
spinning in an endless loop.

gdb backtrace shows the following every time I try it:
(gdb) bt
#0  0x0000002a9990e062 in ssl_init_ModuleKill ()
   from /usr/lib/apache2/extramodules/mod_ssl.so
#1  0x0000002a9990ed61 in ssl_io_suck ()
   from /usr/lib/apache2/extramodules/mod_ssl.so
#2  0x0000000000433c9a in ap_rgetline_core ()
#3  0x00000000004348db in ap_read_request ()
#4  0x000000000041f8b6 in _start ()
#5  0x0000000000430653 in ap_run_process_connection ()
#6  0x00000000004251f1 in ap_graceful_stop_signalled ()
#7  0x0000000000425474 in ap_graceful_stop_signalled ()
#8  0x000000000042550e in ap_graceful_stop_signalled ()
#9  0x0000000000425bcd in ap_mpm_run ()
#10 0x000000000042bce2 in main ()

I have only been able to reproduce the bug with Mozilla 1.7.2 (no other Mozilla
versions tested) when client certificate is sent to the server in a request. 
This request must be sent to a directory that has the following .htaccess file:
SSLRequireSSL
SSLOptions +StdEnvVars +StrictRequire +ExportCertData
SSLVerifyClient optional_no_ca

Using a handmade perl program that requests the same page does not result in any
problems.. but it does use a different certificate, if that can make a
difference. Even directory listing, that apache generates, causes the same
endless loop in server process when Mozilla does the query.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org