AnsweredAssumed Answered

RSA Webagent not thread safe?

Question asked by Mehdi Khemir on Aug 3, 2017

Hi,

 

We ran into an issue with rsa webagent module for Apache.

Here is the backtrace:

 

[Thu Jul 27 11:38:10.303057 2017] [rsawebagent:error] [pid 10822:tid 140395124078336] Authentication service: Access cancelled, User: .
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb00001fcd0 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb00001fcd0 ***
======= Backtrace: =========
/lib64/libc.so.6[0x30e1075dee]
/lib64/libc.so.6[0x30e1078c80]
======= Backtrace: =========
/code/pie/norkom-rsa/3.3/rsawebagent/librsawa_apache.so(_ZN11CHTMLString18GetDefaultTemplateEPKcS1_Pj+0x317)[0x7fb05289090f]
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb01401fcd0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb01401fcd0 ***

 

We are using rsa web agent 8.0, httpd 2.4.25 in worker mode. As you can see, the double free appears after a call from librsawa_apache.so.

 

Does it mean that rsawebagent is not thread safe? Will there be a fix for that?

 

Thank you.

 

Kind regards,

 

Mehdi Khemir

Outcomes