[squid-users] Fwd: Squid shutdown on web request of type http://ftp.domain.country

[Alex Rousskov]

On 9/22/22 18:07, Francisco wrote:
> I have compiled and installed Squid proxy (version 5.6) on Debian 11. 
> When I enable certain response size control rules 
> (/*reply_body_max_size*/), Squid stops instantly when making a web 
> request to web-serving FTPs (for example: http://ftp.sld.cu 
> it´s a FTP site served as HTTP), only happen with this kind of site.

> In /var/log/kernel.log I founded: [squid][500]: segfault at 448 ip 

Squid segmentation faults are usually Squid bugs. Please consider filing 
a bug report with Squid bugzilla and attaching a backtrace from the 
coredump file there. Please keep the coredump file for further analysis.

There is some old information about enabling and examining coredumps at 
the FAQ URL below, but you can use your OS documentation as well:
https://wiki.squid-cache.org/SquidFaq/BugReporting#crashes_and_core_dumps

Upgrading to Squid v5.7 first is a good idea, but it may not address 
this specific bug.


Thank you,

Alex.


> I have the following acl:
> 
> |acl usuarios_nav_basica proxy_auth "/etc/squid/usuarios/nav-basica" acl 
> usuarios_internet proxy_auth "/etc/squid/usuarios/nav-internet" acl 
> usuarios_admins proxy_auth "/etc/squid/usuarios/admins" acl dominio_cuba 
> dstdomain .cu acl dominio_infomed dstdomain .sld.cu <http://sld.cu> acl 
> dominio_bandec dstdomain .bandec.cu <http://bandec.cu> #thousands of 
> domains acl dominios dstdomain "/etc/squid/infomed/dominios" acl 
> dominios_parciales dstdomain "/etc/squid/infomed/dominios_parciales" 
> #thousands of sites acl sitios url_regex -i "/etc/squid/infomed/sitios" 
> acl horario_manhana time MTWHFA 00:00-11:59 acl extensiones_media 
> urlpath_regex -i \.(mpg|mp3|avi|mp4|mov|m4v|mkv|flv)(\?.*)?$ acl 
> extensiones_limitadas urlpath_regex -i \.(exe|cab|msi|iso)(\?.*)?$ 
> cache_peer XXX.XXX.XXX.XXX parent 3128 0 no-query default 
> cache_peer_access XXX.XXX.XXX.XXX allow !dominio_infomed always_direct 
> allow dominio_infomed never_direct allow !dominio_infomed |
> 
> When I activate these rules, Squid shuts down:
> 
> |reply_body_max_size 5 MB extensiones_media usuarios_internet 
> horario_manhana !dominio_cuba !dominios !dominios_parciales !sitios 
> reply_body_max_size 5 MB extensiones_limitadas usuarios_internet 
> horario_manhana !dominio_cuba !dominios !dominios_parciales !sitios ## 
> Usuarios de navegacion basica reply_body_max_size 50 MB 
> usuarios_nav_basica horario_manhana !dominio_infomed dominio_cuba 
> reply_body_max_size 50 MB usuarios_nav_basica horario_manhana dominios 
> !dominio_infomed reply_body_max_size 50 MB usuarios_nav_basica 
> horario_manhana !dominio_infomed dominios_parciales reply_body_max_size 
> 50 MB usuarios_nav_basica horario_manhana !dominio_infomed sitios 
> reply_body_max_size 100 MB usuarios_nav_basica !horario_manhana 
> !dominio_infomed dominio_cuba reply_body_max_size 100 MB 
> usuarios_nav_basica !horario_manhana !dominio_infomed dominios 
> reply_body_max_size 100 MB usuarios_nav_basica !horario_manhana 
> !dominio_infomed dominios_parciales reply_body_max_size 100 MB 
> usuarios_nav_basica !horario_manhana !dominio_infomed sitios ## Usuarios 
> con acceso a internet reply_body_max_size 50 MB usuarios_internet 
> horario_manhana !dominio_infomed dominio_cuba reply_body_max_size 50 MB 
> usuarios_internet horario_manhana !dominio_infomed dominios 
> reply_body_max_size 50 MB usuarios_internet horario_manhana 
> !dominio_infomed dominios_parciales reply_body_max_size 50 MB 
> usuarios_internet horario_manhana !dominio_infomed sitios 
> reply_body_max_size 100 MB usuarios_internet horario_manhana 
> !dominio_cuba reply_body_max_size 100 MB usuarios_internet 
> horario_manhana !dominios reply_body_max_size 100 MB usuarios_internet 
> horario_manhana !dominios_parciales reply_body_max_size 100 MB 
> usuarios_internet horario_manhana !sitios reply_body_max_size 1024 MB 
> usuarios_internet !horario_manhana !dominio_cuba reply_body_max_size 
> 1024 MB usuarios_internet !horario_manhana !dominios reply_body_max_size 
> 1024 MB usuarios_internet !horario_manhana !dominios_parciales 
> reply_body_max_size 1024 MB usuarios_internet !horario_manhana !sitios 
> reply_body_max_size 200 KB all |
> 
> When I make |systemctl status squid|, it show Exiting due to repeated, 
> frequent failures. In /var/log/squid/cache.log I don´t found any about 
> the error.
> 
>   In /var/log/kernel.log I founded: [squid][500]: segfault at 448 ip 
> 00005653d5ec933a sp 0000fffdf9374730 error 4 in squid [5653d5c950000+4c0000]
> 
> *Note*: If I leave the two first |reply_body_max_size| rules 
> declarations, it´s work ok!!!
> 
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users