[squid-users] squid 5.0.3 Segment Violation when using ssl bump and cache peer

[Alex Rousskov]

On 7/3/20 7:49 PM, 橋本紘希 wrote:
> I have a problem with squid 5.0.3.
> 
> I would like to use "Peering support for SSL-Bump" introduced in squid 5.
> http://squid.mirror.colo-serv.net/archive/5/squid-5.0.2-RELEASENOTES.html#ss2.6
> 
> I configured this environment using docker-compose.
> client -> childproxy -> parentproxy -> server
> 
> When I communicated client to server via childproxy and parentproxy,
> "Segment Violation" happened and squid exited abnormally.

You need Squid v5 commit 056ad44 or the corresponding patch:
https://github.com/squid-cache/squid/commit/056ad44.patch

FTR, the commit message lies about the second case being benign. I must
have looked at the wrong code base when writing that description. Sorry.
Both cases are deadly.


> Do I need any extra configuration to use "Peering support for SSL-Bump" feature?

I do not think so.


HTH,

Alex.


> Squid Cache: Version 5.0.3

> #0  0x00007f8b433da387 in raise () from /lib64/libc.so.6
> #1  0x00007f8b433dba78 in abort () from /lib64/libc.so.6
> #2  0x000000000088b4bc in death (sig=11) at tools.cc:359
> #3  <signal handler called>
> #4  0x00000000009dbd12 in Comm::Connection::getPeer (this=0x0) at
> Connection.cc:102
> #5  0x00000000009dbed8 in Comm::Connection::connectTimeout (this=0x0,
> fwdStart=1593816953) at Connection.cc:143
> #6  0x00000000007b1332 in FwdState::connectingTimeout (this=0x2870a48,
> conn=...) at FwdState.cc:1381
> #7  0x00000000007ae351 in FwdState::establishTunnelThruProxy
> (this=0x2870a48, conn=...) at FwdState.cc:850
> #8  0x00000000007adba5 in FwdState::__lambda2::operator()
> (__closure=0x7ffead0888f0) at FwdState.cc:836
> #9  0x00000000007b1ca7 in
> FwdState::advanceDestination<FwdState::noteConnection(HappyConnOpener::Answer&)::__lambda2>(const
> char *, const Comm::ConnectionPointer &, const FwdState::__lambda2 &)
> (this=0x2870a48,
>     stepDescription=0xb487f0 "establish tunnel through proxy",
> conn=..., startStep=...) at FwdState.cc:777
> #10 0x00000000007ae1ca in FwdState::noteConnection (this=0x2870a48,
> answer=...) at FwdState.cc:837
> #11 0x00000000007b5f64 in HappyConnOpener::CbDialer<FwdState>::dial
> (this=0x2871af8) at HappyConnOpener.h:120
> #12 0x00000000007b56ed in
> AsyncCallT<HappyConnOpener::CbDialer<FwdState> >::fire
> (this=0x2871ac0)
>     at ../src/base/AsyncCall.h:150
> #13 0x000000000096c293 in AsyncCall::make (this=0x2871ac0) at AsyncCall.cc:44
> #14 0x000000000096cfca in AsyncCallQueue::fireNext (this=0x23b6ec0) at
> AsyncCallQueue.cc:60
> #15 0x000000000096cd43 in AsyncCallQueue::fire (this=0x23b6ec0) at
> AsyncCallQueue.cc:43
> #16 0x000000000079afbf in EventLoop::dispatchCalls
> (this=0x7ffead088c80) at EventLoop.cc:144
> #17 0x000000000079aee7 in EventLoop::runOnce (this=0x7ffead088c80) at
> EventLoop.cc:121
> #18 0x000000000079ad4e in EventLoop::run (this=0x7ffead088c80) at
> EventLoop.cc:83
> #19 0x000000000081ce58 in SquidMain (argc=3, argv=0x7ffead088fb8) at
> main.cc:1716
> #20 0x000000000081c2c3 in SquidMainSafe (argc=3, argv=0x7ffead088fb8)
> at main.cc:1403
> #21 0x000000000081c296 in main (argc=3, argv=0x7ffead088fb8) at main.cc:1391