Hi,
We ran into an issue with rsa webagent module for Apache.
Here is the backtrace:
[Thu Jul 27 11:38:10.303057 2017] [rsawebagent:error] [pid 10822:tid 140395124078336] Authentication service: Access cancelled, User: .
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb00001fcd0 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb008015510 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb00001fcd0 ***
======= Backtrace: =========
/lib64/libc.so.6[0x30e1075dee]
/lib64/libc.so.6[0x30e1078c80]
======= Backtrace: =========
/code/pie/norkom-rsa/3.3/rsawebagent/librsawa_apache.so(_ZN11CHTMLString18GetDefaultTemplateEPKcS1_Pj+0x317)[0x7fb05289090f]
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb01401fcd0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: corrupted double-linked list: 0x00007fb03400a4d0 ***
*** glibc detected *** httpd: double free or corruption (!prev): 0x00007fb01401fcd0 ***
We are using rsa web agent 8.0, httpd 2.4.25 in worker mode. As you can see, the double free appears after a call from librsawa_apache.so.
Does it mean that rsawebagent is not thread safe? Will there be a fix for that?
Thank you.
Kind regards,
Mehdi Khemir