Re: [Mod-security-developers] when ModSecurit Nginx exit cause system trace
Brought to you by:
victorhora,
zimmerletw
Menu
▾
▴
Re: [Mod-security-developers] when ModSecurit Nginx exit cause system trace
|
From: yorkng z. <yor...@gm...> - 2012-08-19 15:57:50
|
hi Alan,
i think there is some minor errors in my last letter, nginx versions i had
use are 1.2.3 and 1.1.20, not 1.2.1.
*ur question: What's your version of another mod security library
dependencies?*
im not understand the question exactly, compile nginx , i aways use apr
package for the official site, and are the lastest version: apr-1.4.6
apr-iconv-1.2.1
apr-util-1.4.1
*ur question: In what case it occurred?*
when nginx(compile with mod security) run, as long as use web client(such
as curl) access the site which setup by nginx, and then nginx exit(CTRL-C),
the case occur. but nginx run and exit, havent use web client access the
site, this case would not occur.
*ur question:Update your source tree with svn?*
yes, i update the mod security source tree with svn.
*ur questiong: Show your ModSec.data *
ModSec.data's context is simple:
SecRuleEngine on
SecRule REQUEST_URI "secret" "id:999,phase:1,deny"
Regards
yorkng
On Wed, Aug 15, 2012 at 8:23 PM, Alan Silva <ala...@ac...> wrote:
> Hi Zhuo,
>
> What's your version of another mod security library dependencies? In what
> case it occurred? Update your source tree with svn? Show your ModSec.data
> too, please!
>
> [ ]'s
>
> Alan
>
> On Wednesday, August 15, 2012 at 6:25 AM, yorkng zhuo wrote:
>
> hi all,
> i compile ModSecurity Nginx project with Nginx-1.2.1, and the nginx.conf
> set like this
>
> *daemon off;
> matser_process off;*
> server {
> listen 80;
> server_name 192.168.10.34;
> location / {
> root html;
> index intex.html;
> ModsecurityConfig
> /opt/modsec-2.7-iis-nginx-1.2.3/conf.d/ModSec.data;
> ModSecurityEnabled On;
> }
> }
>
>
> when nginx exit, the system print trace information bellow, i think
> libapr(apr_pool operations) cause this, and its a nginx version regardless
> bug(cause at nginx-1.1.20 also), but i cant identity exactly reason of
> this. anyone know it?
> ------------------------------------------------
> $/opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx
> ^C*** glibc detected *** /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx:
> double free or corruption (!prev): 0x0000000001ee9630 ***
> ======= Backtrace: =========
> /lib/x86_64-linux-gnu/libc.so.6(+0x7e626)[0x7f4cf4f48626]
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx[0x4f55e4]
>
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-1.4.6/lib/libapr-1.so.0(+0x1ed48)[0x7f4cf6110d48]
>
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-1.4.6/lib/libapr-1.so.0(apr_pool_destroy+0x57)[0x7f4cf610fbd7]
>
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-1.4.6/lib/libapr-1.so.0(apr_pool_destroy+0x3a)[0x7f4cf610fbba]
>
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-1.4.6/lib/libapr-1.so.0(apr_pool_terminate+0x39)[0x7f4cf610f707]
>
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-1.4.6/lib/libapr-1.so.0(apr_terminate+0x22)[0x7f4cf6112b15]
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx[0x4ac7da]
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx[0x4aba46]
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx[0x436926]
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx[0x4095f4]
> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7f4cf4eeb76d]
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx[0x408f61]
> ======= Memory map: ========
> 00400000-006e2000 r-xp 00000000 08:01 2113858
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx
> 008e1000-008e2000 r--p 002e1000 08:01 2113858
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx
> 008e2000-00902000 rw-p 002e2000 08:01 2113858
> /opt/modsec-2.7-iis-nginx-1.2.3/sbin/nginx
> 00902000-00916000 rw-p 00000000 00:00 0
> 01e60000-01f18000 rw-p 00000000 00:00 0
> [heap]
> 7f4cf3923000-7f4cf3938000 r-xp 00000000 08:01 266625
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f4cf3938000-7f4cf3b37000 ---p 00015000 08:01 266625
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f4cf3b37000-7f4cf3b38000 r--p 00014000 08:01 266625
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f4cf3b38000-7f4cf3b39000 rw-p 00015000 08:01 266625
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f4cf3b39000-7f4cf3b45000 r-xp 00000000 08:01 276110
> /lib/x86_64-linux-gnu/libnss_files-2.15.so
> 7f4cf3b45000-7f4cf3d44000 ---p 0000c000 08:01 276110
> /lib/x86_64-linux-gnu/libnss_files-2.15.so
> 7f4cf3d44000-7f4cf3d45000 r--p 0000b000 08:01 276110
> /lib/x86_64-linux-gnu/libnss_files-2.15.so
> 7f4cf3d45000-7f4cf3d46000 rw-p 0000c000 08:01 276110
> /lib/x86_64-linux-gnu/libnss_files-2.15.so
> 7f4cf3d46000-7f4cf3d50000 r-xp 00000000 08:01 276111
> /lib/x86_64-linux-gnu/libnss_nis-2.15.so
> 7f4cf3d50000-7f4cf3f50000 ---p 0000a000 08:01 276111
> /lib/x86_64-linux-gnu/libnss_nis-2.15.so
> 7f4cf3f50000-7f4cf3f51000 r--p 0000a000 08:01 276111
> /lib/x86_64-linux-gnu/libnss_nis-2.15.so
> 7f4cf3f51000-7f4cf3f52000 rw-p 0000b000 08:01 276111
> /lib/x86_64-linux-gnu/libnss_nis-2.15.so
> 7f4cf3f52000-7f4cf3f69000 r-xp 00000000 08:01 268342
> /lib/x86_64-linux-gnu/libnsl-2.15.so
> 7f4cf3f69000-7f4cf4168000 ---p 00017000 08:01 268342
> /lib/x86_64-linux-gnu/libnsl-2.15.so
> 7f4cf4168000-7f4cf4169000 r--p 00016000 08:01 268342
> /lib/x86_64-linux-gnu/libnsl-2.15.so
> 7f4cf4169000-7f4cf416a000 rw-p 00017000 08:01 268342
> /lib/x86_64-linux-gnu/libnsl-2.15.so
> 7f4cf416a000-7f4cf416c000 rw-p 00000000 00:00 0
> 7f4cf416c000-7f4cf4174000 r-xp 00000000 08:01 276113
> /lib/x86_64-linux-gnu/libnss_compat-2.15.so
> 7f4cf4174000-7f4cf4373000 ---p 00008000 08:01 276113
> /lib/x86_64-linux-gnu/libnss_compat-2.15.so
> 7f4cf4373000-7f4cf4374000 r--p 00007000 08:01 276113
> /lib/x86_64-linux-gnu/libnss_compat-2.15.so
> 7f4cf4374000-7f4cf4375000 rw-p 00008000 08:01 276113
> /lib/x86_64-linux-gnu/libnss_compat-2.15.so
> 7f4cf4375000-7f4cf446e000 r-xp 00000000 08:01 267092
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f4cf446e000-7f4cf466d000 ---p 000f9000 08:01 267092
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f4cf466d000-7f4cf466e000 r--p 000f8000 08:01 267092
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f4cf466e000-7f4cf466f000 rw-p 000f9000 08:01 267092
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f4cf466f000-7f4cf468c000 r-xp 00000000 08:01 2246869
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/zlib-1.2.4/lib/libz.so.1.2.4
> 7f4cf468c000-7f4cf488c000 ---p 0001d000 08:01 2246869
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/zlib-1.2.4/lib/libz.so.1.2.4
> 7f4cf488c000-7f4cf488d000 r--p 0001d000 08:01 2246869
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/zlib-1.2.4/lib/libz.so.1.2.4
> 7f4cf488d000-7f4cf488e000 rw-p 0001e000 08:01 2246869
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/zlib-1.2.4/lib/libz.so.1.2.4
> 7f4cf488e000-7f4cf4898000 r-xp 00000000 08:01 2113179
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-iconv-1.2.1/lib/libapriconv-1.so.0.2.1
> 7f4cf4898000-7f4cf4a98000 ---p 0000a000 08:01 2113179
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-iconv-1.2.1/lib/libapriconv-1.so.0.2.1
> 7f4cf4a98000-7f4cf4a9a000 r--p 0000a000 08:01 2113179
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-iconv-1.2.1/lib/libapriconv-1.so.0.2.1
> 7f4cf4a9a000-7f4cf4a9b000 rw-p 0000c000 08:01 2113179
> /opt/modsec-2.7-iis-nginx-1.2.3/lib/apr-iconv-1.2.1/lib/libapriconv-1.so.0.2.1
> 7f4cf4a9b000-7f4cf4ac2000 r-xp 00000000 08:01 266041
> /lib/x86_64-linux-gnu/libexpat.so.1.5.2
> 7f4cf4ac2000-7f4cf4cc2000 ---p 00027000 08:01 266041
> /lib/x86_64-linux-gnu/libexpat.so.1.5.2
> 7f4cf4cc2000-7f4cf4cc4000 r--p 00027000 08:01 266041
> /lib/x86_64-linux-gnu/libexpat.so.1.5.2
> 7f4cf4cc4000-7f4cf4cc5000 rw-p 00029000 08:01 266041
> /lib/x86_64-linux-gnu/libexpat.so.1.5.2
> 7f4cf4cc5000-7f4cf4cc9000 r-xp 00000000 08:01 266113
> /lib/x86_64-linux-gnu/libuuid.so.1.3.0
> 7f4cf4cc9000-7f4cf4ec8000 ---p 00004000 08:01 266113
> /lib/x86_64-linux-gnu/libuuid.so.1.3.0
> 7f4cf4ec8000-7f4cf4ec9000 r--p 00003000 08:01 266113
> Aborted
>
>
>
> Regards,
>
> Yorkng
>
>
>
--
Regards,
Yorkng
|
