pkg/43004: www/lighttpd segfaults in ssl3_finish_mac()

[gson%gson.org@localhost (Andreas Gustafsson)]

>Number:         43004
>Category:       pkg
>Synopsis:       www/lighttpd segfaults in ssl3_finish_mac()
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Mar 18 18:10:00 +0000 2010
>Originator:     Andreas Gustafsson
>Release:        NetBSD 5.0.2
>Organization:
>Environment:
System: NetBSD gunk.araneus.fi 5.0.2 NetBSD 5.0.2 (PANIX-VC) #2: Wed Mar 17 
11:07:58 EDT 2010 
root%juggler.panix.com@localhost:/misc3/obj/misc2/devel/netbsd/5.0.2/src/sys/arch/i386/compile/PANIX-VC
 i386
Architecture: i386
Machine: i386
>Description:

Using a lighttpd 1.4.26 web server freshly built from current pkgsrc
on NetBSD 5.0.2 (i386/xen) to serve https traffic, the lighttpd
process occasionally segfaults.  Here is a backtrace:

  Core was generated by `lighttpd'.
  Program terminated with signal 11, Segmentation fault.
  #0  0xbb7a5b9c in ssl3_finish_mac () from /usr/lib/libssl.so.6
  (gdb) where
  #0  0xbb7a5b9c in ssl3_finish_mac () from /usr/lib/libssl.so.6
  #1  0xbb7a23e6 in ssl3_do_write () from /usr/lib/libssl.so.6
  #2  0xbb792392 in ssl3_send_server_hello () from /usr/lib/libssl.so.6
  #3  0xbb794783 in ssl3_accept () from /usr/lib/libssl.so.6
  #4  0xbb7a9805 in SSL_accept () from /usr/lib/libssl.so.6
  #5  0xbb787bcb in ssl23_get_client_hello () from /usr/lib/libssl.so.6
  #6  0xbb788356 in ssl23_accept () from /usr/lib/libssl.so.6
  #7  0xbb78c0ef in ssl23_read () from /usr/lib/libssl.so.6
  #8  0xbb7a90e6 in SSL_read () from /usr/lib/libssl.so.6
  #9  0x08052669 in connection_handle_read_ssl (srv=0xbb401400, con=0xbb404c00) 
at connections.c:219
  #10 0x080528d6 in connection_handle_read (srv=0xbb401400, con=0xbb404c00) at 
connections.c:324
  #11 0x08053d33 in connection_handle_read_state (srv=0xbb401400, 
con=0xbb404c00) at connections.c:890
  #12 0x08054807 in connection_handle_fdevent (s=0xbb401400, 
context=0xbb404c00, revents=1) at connections.c:1228
  #13 0x080503bc in main (argc=3, argv=0xbf7fed84) at server.c:1446
  (gdb)

The only SSL related options used in the lighttpd.conf file are
"ssl.engine" and "ssl.pemfile".

Perhaps this is related to the Apache segfaults discussed in the
thread beginning with the message
http://mail-index.netbsd.org/netbsd-users/2009/11/21/msg004905.html

>How-To-Repeat:

Set up a lighttpd web server with SSL.  Serve traffic.

>Fix:

Not known.