glen@builder-ac pld/SPECS $ diff -u /home/glen/rpm/pld/BUILD/lighttpd-1.4.11/src/mod_cgi.c{~,}
--- /home/glen/rpm/pld/BUILD/lighttpd-1.4.11/src/mod_cgi.c~ 2006-07-18 14:02:01.285146857 +0300
+++ /home/glen/rpm/pld/BUILD/lighttpd-1.4.11/src/mod_cgi.c 2006-07-18 14:11:08.687416106 +0300
@@ -933,6 +933,7 @@
buffer_reset(con->physical.path);
sess = cgi_session_init();
+ assert(sess);
sess->remote_con = con;
sess->pid = pid;
14:14:11 root[pts/2]@wintersunset /etc/lighttpd# gdb --args lighttpd -f /etc/lighttpd/lighttpd.conf -D
GNU gdb 6.4
Copyright 2005 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i686-pld-linux"...Using host libthread_db library "/lib/tls/libthread_db.so.1".
(gdb) r
Starting program: /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf -D
log.c.139: (trace) server started
*** glibc detected *** free(): invalid next size (fast): 0x080e6120 ***
Program received signal SIGABRT, Aborted.
0xffffe410 in __kernel_vsyscall ()
(gdb) mod_cgi.c.1003: (trace) http-version: (0)
mod_cgi.c.649: (trace) http-version: HTTP/1.0 (0)
bt
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d19f41 in raise () from /lib/tls/libc.so.6
#2 0xb7d1b6e7 in abort () from /lib/tls/libc.so.6
#3 0xb7d4d57e in __fsetlocking () from /lib/tls/libc.so.6
#4 0xb7d57297 in mallopt () from /lib/tls/libc.so.6
#5 0xb7d55f6d in mallopt () from /lib/tls/libc.so.6
#6 0xb7d54cbb in free () from /lib/tls/libc.so.6
#7 0x08069783 in iosocket_free (sock=0x80e6120) at iosocket.c:35
#8 0xb7f7b7f4 in cgi_session_free (sess=0x80e6130) at mod_cgi.c:102
#9 0xb7f7c1bf in cgi_connection_close (srv=0x8077048, con=0x80a8c20, p=0x8094c90) at mod_cgi.c:372
#10 0xb7f7c379 in cgi_connection_close_callback (srv=0x8077048, con=0x80a8c20, p_d=0x8094c90) at mod_cgi.c:438
#11 0x08063ce6 in plugins_call_connection_reset (srv=0x8077048, con=0x80a8c20) at plugin.c:300
#12 0x0805282e in connection_reset (srv=0x8077048, con=0x80a8c20) at connections.c:554
#13 0x0805469d in connection_state_machine (srv=0x8077048, con=0x80a8c20) at connections.c:1399
#14 0x0804e800 in lighty_mainloop (srv=0x8077048) at server.c:776
#15 0x0804feb2 in main (argc=4, argv=0xbf8a12c4, envp=0xbf8a12d8) at server.c:1391
(gdb)