Can you try with
kamailio ... --atexit=no ....
On Tue, 14 May 2024, 13:13 Marat Gareev via sr-users, <
sr-users(a)lists.kamailio.org> wrote:
Hello again,
I've updated Kamailio to 5.7.5, set tls_threads_mode=2 and got another
segfault:
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x00007f26bb352efd in __strlen_avx2 () from /lib64/libc.so.6
Missing separate debuginfos, use: dnf debuginfo-install kamailio-5.7.5-4817.x86_64
(gdb) bt
#0 0x00007f26bb352efd in __strlen_avx2 () from /lib64/libc.so.6
#1 0x00007f26bb31a278 in __vfprintf_internal () from /lib64/libc.so.6
#2 0x00007f26bb3dd4ea in __vsyslog_internal () from /lib64/libc.so.6
#3 0x00007f26bb3dd9ca in syslog () from /lib64/libc.so.6
#4 0x000000000071e574 in qm_debug_check_frag (qm=0x7f26aa4ee000, f=0x7f26aa638388,
file=0x7f26baa5b0b6 "tls: tls_init.c", line=399, efile=0x8abb39
"core/mem/q_malloc.c", eline=526) at core/mem/q_malloc.c:126
#5 0x00000000007227c3 in qm_free (qmp=0x7f26aa4ee000, p=0x7f26aa6383c0,
file=0x7f26baa5b0b6 "tls: tls_init.c", func=0x7f26baa5cdb8 "ser_free",
line=399, mname=0x7f26baa5b0b2 "tls") at core/mem/q_malloc.c:526
#6 0x000000000072d2c9 in qm_shm_free (qmp=0x7f26aa4ee000, p=0x7f26aa6383c0,
file=0x7f26baa5b0b6 "tls: tls_init.c", func=0x7f26baa5cdb8 "ser_free",
line=399, mname=0x7f26baa5b0b2 "tls")
at core/mem/q_malloc.c:1364
#7 0x00007f26baa12ea9 in ?? ()
#8 0x00007f26aa6383c0 in ?? ()
#9 0x000001b3ba70914b in ?? ()
#10 0x00007f26ba853e4b in ?? () from /lib64/libcrypto.so.3
#11 0x00007f26aa6383c0 in ?? ()
#12 0x00007f26aa6383c0 in ?? ()
#13 0x00007f26ba61cfc5 in conf_modules_finish_int () from /lib64/libcrypto.so.3
#14 0x00007f26ba61d694 in CONF_modules_unload () from /lib64/libcrypto.so.3
#15 0x00007f26ba6c0ff9 in OPENSSL_cleanup () from /lib64/libcrypto.so.3
#16 0x00007f26baa1a21e in ?? ()
#17 0x00000001000623b0 in ?? ()
#18 0x00007f26aa5276c8 in ?? ()
#19 0x00007ffd66587330 in ?? ()
#20 0x000000000071e0a0 in futex_release (lock=0x7f26bb3dd930 <syslog>) at
core/mem/../mem/../futexlock.h:134
#21 0x00000000006e993e in destroy_tls () at core/tls_hooks.c:75
#22 0x000000000041f278 in cleanup (show_status=1) at main.c:595
#23 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:722
#24 0x0000000000421717 in handle_sigs () at main.c:753
#25 0x0000000000430c88 in main_loop () at main.c:1989
#26 0x0000000000439d13 in main (argc=14, argv=0x7ffd66587d08) at main.c:3213
(gdb)
And yes, the problem is definitely related to FIPS, because I did not
see any errors with regular OpenSSL 3.x.
пн, 13 мая 2024 г. в 13:39, Marat Gareev <maratkin94(a)gmail.com>om>:
Hello Henning,
yes, I use this major version
$ openssl version
OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
Thanks, I'll try updating Kamailio and report the results.
пн, 13 мая 2024 г. в 13:19, Henning Westerholt <hw(a)gilawa.com>om>:
> Hello,
>
>
>
> are you on openssl 3.x by any chance? If yes, please upgrade to
> kamailio 5.7.5 or 5.8.1 and set tls_thread_mode=2 in the kamailio.cfg, as
> it fixes certain memory corruption issues on this openssl version.
>
> If you are still getting crashes after the upgrade and setting, please
> let us know, it might be something related to the FIPS mode.
>
>
>
> Cheers,
>
>
>
> Henning
>
>
>
> *From:* Marat Gareev via sr-users <sr-users(a)lists.kamailio.org>
> *Sent:* Montag, 13. Mai 2024 09:19
> *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org
> >
> *Cc:* Marat Gareev <maratkin94(a)gmail.com>
> *Subject:* [SR-Users] TLS module crashes with FIPS OpenSSL
>
>
>
> Hello,
>
>
>
> I encountered a problem stopping Kamailio with FIPS OpenSSL:
>
>
>
> Program terminated with signal SIGSEGV, Segmentation fault.
>
> #0 0x00007ff7292380ac in OPENSSL_sk_pop () from /lib64/libcrypto.so.3
>
> Missing separate debuginfos, use: dnf debuginfo-install kamailio-5.7.3-4816.x86_64
>
> (gdb) bt
>
> #0 0x00007ff7292380ac in OPENSSL_sk_pop () from /lib64/libcrypto.so.3
>
> #1 0x00007ff72914bf5b in conf_modules_finish_int () from /lib64/libcrypto.so.3
>
> #2 0x00007ff72914c694 in CONF_modules_unload () from /lib64/libcrypto.so.3
>
> #3 0x00007ff7291efff9 in OPENSSL_cleanup () from /lib64/libcrypto.so.3
>
> #4 0x00007ff72954702b in ?? ()
>
> #5 0x0000000100061c08 in ?? ()
>
> #6 0x00007ff7190566c8 in ?? ()
>
> #7 0x00007ffccf196a20 in ?? ()
>
> #8 0x000000000071da8a in futex_release (lock=0x7ff729f08b50 <syslog>) at
core/mem/../mem/../futexlock.h:134
>
> #9 0x00000000006e9448 in destroy_tls () at core/tls_hooks.c:75
>
> #10 0x000000000041f278 in cleanup (show_status=1) at main.c:594
>
> #11 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:721
>
> #12 0x0000000000421717 in handle_sigs () at main.c:752
>
> #13 0x0000000000430c88 in main_loop () at main.c:1988
>
> #14 0x0000000000439d13 in main (argc=14, argv=0x7ffccf1973f8) at main.c:3212
>
> (gdb)
>
>
>
> Environment:
>
> Oracle Linux Server 9.3
>
> Kamailio 5.7.3
>
> yum list --installed | grep ssl
>
> openssl.x86_64 10:3.0.7-24.0.3.el9_fips
@tools
>
> openssl-libs.x86_64 10:3.0.7-24.0.3.el9_fips
@tools
>
> openssl-pkcs11.x86_64 0.4.11-7.el9
@anaconda
>
> xmlsec1-openssl.x86_64 1.2.29-9.el9
@AppStream
>
>
>
> What can I do for further investigation?
>
>
>
> Thanks
>
__________________________________________________________
Kamailio - Users
Mailing List - Non Commercial Discussions
To unsubscribe send an email to sr-users-leave(a)lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to
the sender!
Edit mailing list options or unsubscribe:
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
To unsubscribe send an email to sr-users-leave(a)lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to
the sender!
Edit mailing list options or unsubscribe: