Forum

Hello, i install the new Hiawatha Webserver Version 8.6 today.
After the update i want to visit a website on my webserver. But then the webserver crashes.
Do you now the reason for the crash. Here is the error:

==10939== Memcheck, a memory error detector
==10939== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==10939== Using Valgrind-3.6.0.SVN-Debian and LibVEX; rerun with -h for copyright info
==10939== Command: /usr/sbin/hiawatha -d
==10939==
==10939== Invalid write of size 2
==10939== at 0x8054E5B: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939== Address 0x44a6b5c is 4 bytes after a block of size 32 alloc'd
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x8054E3E: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== Invalid write of size 4
==10939== at 0x8054E61: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939== Address 0x44a6b58 is 0 bytes after a block of size 32 alloc'd
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x8054E3E: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== Syscall param poll(ufds.fd) points to unaddressable byte(s)
==10939== at 0x42FD9A6: poll (poll.c:87)
==10939== by 0x8054F06: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939== Address 0x44a6b58 is 0 bytes after a block of size 32 alloc'd
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x8054E3E: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== Syscall param poll(ufds.events) points to unaddressable byte(s)
==10939== at 0x42FD9A6: poll (poll.c:87)
==10939== by 0x8054F06: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939== Address 0x44a6b5c is 4 bytes after a block of size 32 alloc'd
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x8054E3E: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== Syscall param poll(ufds.reventss) points to unaddressable byte(s)
==10939== at 0x42FD9A6: poll (poll.c:87)
==10939== by 0x8054F06: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939== Address 0x44a6b5e is 6 bytes after a block of size 32 alloc'd
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x8054E3E: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== Thread 3:
==10939== Conditional jump or move depends on uninitialised value(s)
==10939== at 0x402532D: strncpy (mc_replace_strmem.c:339)
==10939== by 0x402E8C1: crypt_r (crypt-entry.c:120)
==10939== by 0x402EA18: crypt (crypt-entry.c:161)
==10939== by 0x8056D4A: http_authentication_result (in /usr/sbin/hiawatha)
==10939== by 0x80539D5: serve_client (in /usr/sbin/hiawatha)
==10939== by 0x805421D: connection_handler (in /usr/sbin/hiawatha)
==10939== by 0x4066954: start_thread (pthread_create.c:300)
==10939== by 0x430B1DD: clone (clone.S:130)
==10939==
==10939==
==10939== HEAP SUMMARY:
==10939== in use at exit: 1,016,795 bytes in 996 blocks
==10939== total heap usage: 11,804 allocs, 10,808 frees, 5,652,587 bytes allocated
==10939==
==10939== Thread 1:
==10939== 160 (40 direct, 120 indirect) bytes in 1 blocks are definitely lost in loss record 147 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x431BDD3: nss_parse_service_list (nsswitch.c:622)
==10939== by 0x431C516: __nss_database_lookup (nsswitch.c:164)
==10939== by 0x47B9EAB: ???
==10939== by 0x47BAF84: ???
==10939== by 0x42D5334: getpwnam_r@@GLIBC_2.1.2 (getXXbyYY_r.c:253)
==10939== by 0x42D4D9E: getpwnam (getXXbyYY.c:117)
==10939== by 0x806893E: parse_userid (in /usr/sbin/hiawatha)
==10939== by 0x8062059: read_main_configfile (in /usr/sbin/hiawatha)
==10939== by 0x80544C9: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== 160 (40 direct, 120 indirect) bytes in 1 blocks are definitely lost in loss record 148 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x431BDD3: nss_parse_service_list (nsswitch.c:622)
==10939== by 0x431C516: __nss_database_lookup (nsswitch.c:164)
==10939== by 0x47B8F2B: ???
==10939== by 0x47B9E34: ???
==10939== by 0x431CC21: __nss_getent_r (getnssent_r.c:171)
==10939== by 0x42D3C95: getgrent_r@@GLIBC_2.1.2 (getXXent_r.c:162)
==10939== by 0x431C81A: __nss_getent (getnssent.c:38)
==10939== by 0x42D3679: getgrent (getXXent.c:84)
==10939== by 0x80686D4: lookup_group_ids (in /usr/sbin/hiawatha)
==10939== by 0x80621B8: read_main_configfile (in /usr/sbin/hiawatha)
==10939== by 0x80544C9: run_server (in /usr/sbin/hiawatha)
==10939==
==10939== 256 bytes in 1 blocks are possibly lost in loss record 159 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x409ADD9: mpi_grow (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x409B18B: mpi_read_binary (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x4099403: asn1_get_mpi (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40C669C: x509parse_key (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40C6D38: x509parse_keyfile (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x805934D: ssl_load_key_cert (in /usr/sbin/hiawatha)
==10939== by 0x80549FF: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== 516 bytes in 1 blocks are possibly lost in loss record 178 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x409ADD9: mpi_grow (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x409AF71: mpi_shift_l (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x409D4C6: mpi_exp_mod (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40AC339: rsa_private (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40AD379: rsa_pkcs1_decrypt (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BD00F: ??? (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BA23C: ??? (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BAFAF: ssl_handshake_server (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BCA64: ssl_handshake (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x8058F51: ssl_accept (in /usr/sbin/hiawatha)
==10939== by 0x80541A6: connection_handler (in /usr/sbin/hiawatha)
==10939==
==10939== 516 bytes in 1 blocks are definitely lost in loss record 180 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x409ADD9: mpi_grow (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x409AF71: mpi_shift_l (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x409D4C6: mpi_exp_mod (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40AC2D1: rsa_private (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40AD379: rsa_pkcs1_decrypt (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BD00F: ??? (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BA23C: ??? (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BAFAF: ssl_handshake_server (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BCA64: ssl_handshake (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x8058F51: ssl_accept (in /usr/sbin/hiawatha)
==10939== by 0x80541A6: connection_handler (in /usr/sbin/hiawatha)
==10939==
==10939== 1,400 bytes in 14 blocks are definitely lost in loss record 191 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x40BD153: ssl_handshake_init (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x40BD58F: ssl_init (in /usr/lib/hiawatha/libpolarssl.so.1.2.0)
==10939== by 0x8058D7D: ssl_accept (in /usr/sbin/hiawatha)
==10939== by 0x80541A6: connection_handler (in /usr/sbin/hiawatha)
==10939== by 0x4066954: start_thread (pthread_create.c:300)
==10939== by 0x430B1DD: clone (clone.S:130)
==10939==
==10939== 35,990 (252 direct, 35,738 indirect) bytes in 1 blocks are definitely lost in loss record 200 of 201
==10939== at 0x4023F50: malloc (vg_replace_malloc.c:236)
==10939== by 0x805EF42: default_config (in /usr/sbin/hiawatha)
==10939== by 0x8054499: run_server (in /usr/sbin/hiawatha)
==10939== by 0x805540C: main (in /usr/sbin/hiawatha)
==10939==
==10939== LEAK SUMMARY:
==10939== definitely lost: 2,248 bytes in 18 blocks
==10939== indirectly lost: 35,978 bytes in 675 blocks
==10939== possibly lost: 772 bytes in 2 blocks
==10939== still reachable: 977,797 bytes in 301 blocks
==10939== suppressed: 0 bytes in 0 blocks
==10939== Reachable blocks (those to which a pointer was found) are not shown.
==10939== To see them, rerun with: --leak-check=full --show-reachable=yes
==10939==
==10939== For counts of detected and suppressed errors, rerun with: -v
==10939== Use --track-origins=yes to see where uninitialised values come from
==10939== ERROR SUMMARY: 360 errors from 13 contexts (suppressed: 39 from 10)


PS: today i also use a new ssl cert
Hiawatha version: 8.6
Operating System: Debian Squeeze i386

It's a private key with 4096 bit

I informed the PolarSSL developer. I'll wait for his response.

Ok thank you.
When I use my old private key with 2048 bit the server runs without any problems.

Can you try again with SSL_DEBUG_LEVEL in src/libssl.c set to 6. This will cause a lot of log entries in system.log. Also, don't strip the binary.

After a crash, send that file to info@hiawatha-webserver.org.

I send you an email.

Can you find the problem?

I thought your issue was solved because you recieved a misformed certificate from your CA?

I dont't think so, because my Mailserver can use the certificate without any problems.

Can you contact me via email, i think it's better.
Here is my mail adress: info@juliuskrause.de

Thanks :-P

Can you try this beta version [www.leisink.net]? It contains an updated PolarSSL library. Perhaps is solves the problem.

Hey, sorry for my late answer, but i was in the holiday.

I updated my system on the new version. But it also doesn't work.
Only for one or two minutes and then the webserver crashes

Julius

Can you try with a different private key and certificate?