id summary reporter owner description type status priority milestone component version resolution keywords cc uname nginx_version 274 error_page 400 =444 /; утекают сокеты naikoto "Конфигурация для игнорирования неизвестных доменов. При некорректном запросе соединение не закрывается и остаётся в CLOSE_WAIT. Запрос должен быть с другого хоста. {{{ echo -e '\x04\x01\x00P>\xECl\xC80\x00'|nc server 8000 }}} conf {{{ worker_processes 1; worker_rlimit_core 500M; working_directory /tmp/core/; debug_points abort; pid /tmp/nginx.pid; events { worker_connections 1024; } error_log /tmp/err debug; http { types { text/html html; } access_log off; server { server_name _; return 444; error_page 400 =444 /; } } }}} error.log: {{{ 2013/01/06 13:59:37 [debug] 16876#0: *1 malloc: 083BFC68:656 2013/01/06 13:59:37 [debug] 16876#0: *1 malloc: 083C5E00:1024 2013/01/06 13:59:37 [debug] 16876#0: *1 posix_memalign: 083C6220:4096 @16 2013/01/06 13:59:37 [debug] 16876#0: *1 http process request line 2013/01/06 13:59:37 [debug] 16876#0: *1 recv: fd:5 11 of 1024 2013/01/06 13:59:37 [info] 16876#0: *1 client sent invalid method while reading client request line, client: 1.0.0.8, server: _, request: ""^D^A^@P>l0^@"" 2013/01/06 13:59:37 [debug] 16876#0: *1 http finalize request: 400, ""?"" a:1, c:1 2013/01/06 13:59:37 [debug] 16876#0: *1 event timer del: 5: 256771487 2013/01/06 13:59:37 [debug] 16876#0: *1 http special response: 400, ""?"" 2013/01/06 13:59:37 [debug] 16876#0: *1 internal redirect: ""/?"" 2013/01/06 13:59:37 [debug] 16876#0: *1 rewrite phase: 0 2013/01/06 13:59:37 [debug] 16876#0: *1 http finalize request: 444, ""/?"" a:1, c:2 2013/01/06 13:59:37 [debug] 16876#0: *1 http terminate request count:2 2013/01/06 13:59:37 [debug] 16876#0: *1 http terminate cleanup count:2 blk:0 2013/01/06 13:59:37 [debug] 16876#0: *1 http finalize request: -4, ""/?"" a:1, c:2 2013/01/06 13:59:37 [debug] 16876#0: *1 http request count:2 blk:0 ... 2013/01/06 14:00:23 [alert] 16876#0: open socket #5 left in connection 2 2013/01/06 14:00:23 [alert] 16876#0: aborting 2013/01/06 14:00:23 [notice] 16875#0: signal 17 (SIGCHLD) received 2013/01/06 14:00:23 [alert] 16875#0: worker process 16876 exited on signal 6 (core dumped) }}} gdb {{{ gdb) set $c = &ngx_cycle->connections[2] (gdb) p $c->log->connection $1 = 1 (gdb) p *$c $2 = {data = 0x83bfc68, read = 0x83e5748, write = 0x83f2750, fd = 5, recv = 0x806e4d0 , send = 0x806ea14 , recv_chain = 0x806e650 , send_chain = 0x8074a54 , listening = 0x83c0924, sent = 0, log = 0x83bfb98, pool = 0x83bfb60, sockaddr = 0x83bfb88, socklen = 16, addr_text = {len = 7, data = 0x83bfbb0 ""1.0.0.8""}, local_sockaddr = 0x83cb5d4, buffer = 0x83bfbec, queue = {prev = 0x0, next = 0x0}, number = 1, requests = 1, buffered = 0, log_error = 2, single_connection = 1, unexpected_eof = 0, timedout = 0, error = 0, destroyed = 0, idle = 0, reusable = 0, close = 0, sendfile = 0, sndlowat = 0, tcp_nodelay = 0, tcp_nopush = 2} (gdb) set $r = (ngx_http_request_t *) $c->data (gdb) p *$r $3 = {signature = 1347703880, connection = 0x83cd798, ctx = 0x83c6428, main_conf = 0x83c1080, srv_conf = 0x83c9a40, loc_conf = 0x83c9a90, read_event_handler = 0x8085893 , write_event_handler = 0x80851bb , cache = 0x0, upstream = 0x0, upstream_states = 0x0, pool = 0x83c6220, header_in = 0x83bfbec, headers_in = {headers = {last = 0x0, part = {elts = 0x0, nelts = 0, next = 0x0}, size = 0, nalloc = 0, pool = 0x0}, host = 0x0, connection = 0x0, if_modified_since = 0x0, if_unmodified_since = 0x0, if_match = 0x0, if_none_match = 0x0, user_agent = 0x0, referer = 0x0, content_length = 0x0, content_type = 0x0, range = 0x0, if_range = 0x0, transfer_encoding = 0x0, expect = 0x0, authorization = 0x0, keep_alive = 0x0, user = {len = 0, data = 0x0}, passwd = {len = 0, data = 0x0}, cookies = {elts = 0x0, nelts = 0, size = 0, nalloc = 0, pool = 0x0}, server = {len = 0, data = 0x0}, content_length_n = -1, keep_alive_n = -1, connection_type = 0, chunked = 0, msie = 0, msie6 = 0, opera = 0, gecko = 0, chrome = 0, safari = 0, konqueror = 0}, headers_out = {headers = {last = 0x83bfd38, part = {elts = 0x83c6248, nelts = 0, next = 0x0}, size = 24, nalloc = 20, pool = 0x83c6220}, status = 444, status_line = {len = 0, data = 0x0}, server = 0x0, date = 0x0, content_length = 0x0, content_encoding = 0x0, location = 0x0, refresh = 0x0, last_modified = 0x0, content_range = 0x0, accept_ranges = 0x0, www_authenticate = 0x0, expires = 0x0, etag = 0x0, override_charset = 0x0, content_type_len = 0, content_type = {len = 0, data = 0x0}, charset = {len = 0, data = 0x0}, content_type_lowcase = 0x0, content_type_hash = 0, cache_control = {elts = 0x0, nelts = 0, size = 0, nalloc = 0, pool = 0x0}, content_length_n = -1, date_time = 0, last_modified_time = -1}, request_body = 0x0, lingering_time = 0, start_sec = 1357466377, start_msec = 23, method = 2, http_version = 0, request_line = {len = 10, data = 0x83c5e00 ""\004\001""}, uri = {len = 1, data = 0x83c9e47 ""/""}, args = {len = 0, data = 0x0}, exten = {len = 0, data = 0x0}, unparsed_uri = {len = 0, data = 0x0}, method_name = {len = 3, data = 0x80b8cf8 ""GET ""}, http_protocol = {len = 0, data = 0x0}, out = 0x0, main = 0x83bfc68, parent = 0x0, postponed = 0x0, post_subrequest = 0x0, posted_requests = 0x83bfec0, virtual_names = 0x0, phase_handler = 0, content_handler = 0, access_code = 0, variables = 0x83c6478, ncaptures = 0, captures = 0x0, captures_data = 0x0, limit_rate = 0, header_size = 0, request_length = 0, err_status = 444, http_connection = 0x83bfbcc, log_handler = 0x8086fef , cleanup = 0x0, subrequests = 201, count = 1, blocked = 0, aio = 0, http_state = 1, complex_uri = 0, quoted_uri = 0, plus_in_uri = 0, space_in_uri = 0, invalid_header = 0, add_uri_to_alias = 0, valid_location = 1, valid_unparsed_uri = 0, uri_changed = 0, uri_changes = 10, request_body_in_single_buf = 0, request_body_in_file_only = 0, request_body_in_persistent_file = 0, request_body_in_clean_file = 0, request_body_file_group_access = 0, request_body_file_log_level = 5, subrequest_in_memory = 0, waited = 0, cached = 0, proxy = 0, bypass_cache = 0, no_cache = 0, limit_conn_set = 0, limit_req_set = 0, pipeline = 0, plain_http = 0, chunked = 0, header_only = 0, keepalive = 0, lingering_close = 0, discard_body = 0, internal = 1, error_page = 1, ignore_content_encoding = 0, filter_finalize = 0, post_action = 0, request_complete = 0, request_output = 0, header_sent = 0, expect_tested = 1, root_tested = 0, done = 0, logged = 0, buffered = 0, main_filter_need_in_memory = 0, filter_need_in_memory = 0, filter_need_temporary = 0, allow_ranges = 0, state = 0, header_hash = 0, lowcase_index = 0, lowcase_header = '\000' , header_name_start = 0x0, header_name_end = 0x0, header_start = 0x0, header_end = 0x0, uri_start = 0x83bfc68 ""HTTP\230\327<\b(d<\b\200\020<\b@\232<\b\220\232<\b\223X\b\b\273Q\b\b"", uri_end = 0x0, uri_ext = 0x0, args_start = 0x0, request_start = 0x83c5e00 ""\004\001"", request_end = 0x0, method_end = 0x0, schema_start = 0x0, schema_end = 0x0, host_start = 0x0, host_end = 0x0, port_start = 0x0, port_end = 0x0, http_minor = 0, http_major = 0} }}} " defect closed minor nginx-core 1.3.x fixed Linux 3.2.0-0.bpo.4-amd64 #1 SMP Debian 3.2.32-1~bpo60+1 x86_64 GNU/Linux "nginx version: nginx/1.3.11 configure arguments: --with-debug --prefix=/usr --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --pid-path=/var/run/nginx/nginx.pid --lock-path=/var/lock/nginx.lock --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/tmp/body --http-proxy-temp-path=/tmp/proxy --without-http_auth_basic_module --without-http_browser_module --without-http_empty_gif_module --without-http_fastcgi_module --without-http_geo_module --without-http_gzip_module --without-http_limit_req_module --without-http_limit_conn_module --without-http_map_module --without-http_memcached_module --without-http_proxy_module --without-http_scgi_module --without-http_split_clients_module --without-http_ssi_module --without-http_upstream_ip_hash_module --without-http_userid_module --without-http_uwsgi_module"