I did not hit this bug, which makes me think that it is an nginx 1.1.20 specific thing. We developed and briefly tested the module using nginx 1.2.0 (I will use 1.2.3 going forward). The numerous versions of nginx might be problematic in the long term, so IMHO we should always focus on the latest stable one. Regardless of the version issue, I think that the bug is worth fixing, it makes the module more robust. Greg > Date: Mon, 13 Aug 2012 18:23:46 +0800
> From: yorkng zhuo <yor...@gm...>
> Subject: [Mod-security-developers] simple GET request cause
> ModSecurity nginx crash
> To: mod...@li...
> Message-ID:
> <CAKV5U6=echSziA=h=7RVLGe7gaQd7tkeir=g+p...@ma...>
> Content-Type: text/plain; charset="iso-8859-1"
>
> hello all,
> i'm testing ModSecurity nginx at ubuntu 12.04, nginx version 1.1.20
> when i use curl like this: curl http://localhost/secret, then the nginx
> worker process crash. i use gdb debug it, trouble spots is here
>
|