Bug#661566: libnet-ssleay-perl: Segfault when lniked into an Apache/mod_ssl/mod_perl process

[Niko Tyni]

On Tue, Mar 06, 2012 at 08:14:34PM +0200, Niko Tyni wrote:
> On Mon, Feb 27, 2012 at 06:57:13PM -0800, Ivan Kohler wrote:
> > Package: libnet-ssleay-perl
> > Version: 1.45-1
> > Severity: important
> > 
> > Apache segfaults when this module is included in a mod_perl application and
> > mod_ssl is enabled.  I am using the prefork MPM.
> > 
> > To reproduce:
> > a2enmod ssl
> > a2enmod perl
> > echo "PerlModule Net::SSLeay" >/etc/apache2/conf.d/sslbug.conf
> > service apache2 restart
> > 
> > 1.43-1 is also broken in this regard.
> > 1.42-1+b1 works.
> 
> FWIW, this broke with upstream r290
> 
>  http://anonscm.debian.org/viewvc/net-ssleay?view=revision&revision=290

Also, backtrace with debugging symbols:

#0  0x00007f196e92fdb4 in ?? ()
#1  0x00007f196f8ad4e0 in ERR_remove_thread_state () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#2  0x00007f196fdedabf in ssl_cleanup_pre_config (data=<optimized out>) at mod_ssl.c:245
#3  0x00007f1973ae2ace in run_cleanups (cref=<optimized out>) at ../memory/unix/apr_pools.c:2346
#4  apr_pool_clear (pool=0x7f197436f028) at ../memory/unix/apr_pools.c:767
#5  0x00007f19743ad574 in main (argc=3, argv=0x7fff984feae8) at main.c:698

<https://rt.cpan.org/Public/Bug/Display.html?id=73532> is very much related.

-- 
Niko Tyni   ntyni at debian.org