Skip to content

Redis 6.0.6 crash with SiGSEGV in SSL_set_fd at startup #7565

@daixijun

Description

@daixijun

Crash report

Paste the complete crash log between the quotes below. Please include a few lines from the log preceding the crash report to provide some context.

=== REDIS BUG REPORT START: Cut & paste starting from here ===
6662:S 25 Jul 2020 16:13:57.299 # Redis 6.0.6 crashed by signal: 11
6662:S 25 Jul 2020 16:13:57.299 # Crashed running the instruction at: 0x7f912a86deba
6662:S 25 Jul 2020 16:13:57.299 # Accessing address: 0x20
6662:S 25 Jul 2020 16:13:57.299 # Failed assertion: <no assertion failed> (<no file>:0)

------ STACK TRACE ------
EIP:
/lib64/libssl.so.10(SSL_set_bio+0xa)[0x7f912a86deba]

Backtrace:
//usr/local/bin/redis-server 0.0.0.0:6379(logStackTrace+0x2e)[0x47751e]
//usr/local/bin/redis-server 0.0.0.0:6379(sigsegvHandler+0x96)[0x477ba6]
/lib64/libpthread.so.0(+0xf630)[0x7f912a1bc630]
/lib64/libssl.so.10(SSL_set_bio+0xa)[0x7f912a86deba]
/lib64/libssl.so.10(SSL_set_fd+0x3f)[0x7f912a86e06f]
//usr/local/bin/redis-server 0.0.0.0:6379[0x4c24b0]
//usr/local/bin/redis-server 0.0.0.0:6379(aeProcessEvents+0x28a)[0x42f41a]
//usr/local/bin/redis-server 0.0.0.0:6379(aeMain+0x1d)[0x42f76d]
//usr/local/bin/redis-server 0.0.0.0:6379(main+0x4b9)[0x42c0b9]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f9129e01555]
//usr/local/bin/redis-server 0.0.0.0:6379[0x42c369]

------ INFO OUTPUT ------
# Server
redis_version:6.0.6
redis_git_sha1:00000000
redis_git_dirty:0
redis_build_id:451087295f496f75
redis_mode:standalone
os:Linux 4.19.76-linuxkit x86_64
arch_bits:64
multiplexing_api:epoll
atomicvar_api:atomic-builtin
gcc_version:8.3.1
process_id:6662
run_id:fa946606553c4a2892850ddd2050a54d942b8980
tcp_port:6379
uptime_in_seconds:0
uptime_in_days:0
hz:10
configured_hz:10
lru_clock:1858117
executable://usr/local/bin/redis-server
config_file:/etc/redis/6379.conf

# Clients
connected_clients:0
client_recent_max_input_buffer:0
client_recent_max_output_buffer:0
blocked_clients:0
tracking_clients:0
clients_in_timeout_table:0

# Memory
used_memory:806568
used_memory_human:787.66K
used_memory_rss:5459968
used_memory_rss_human:5.21M
used_memory_peak:806568
used_memory_peak_human:787.66K
used_memory_peak_perc:100.20%
used_memory_overhead:804936
used_memory_startup:804936
used_memory_dataset:1632
used_memory_dataset_perc:100.00%
allocator_allocated:1257008
allocator_active:1536000
allocator_resident:4050944
total_system_memory:8353480704
total_system_memory_human:7.78G
used_memory_lua:37888
used_memory_lua_human:37.00K
used_memory_scripts:0
used_memory_scripts_human:0B
number_of_cached_scripts:0
maxmemory:524288000
maxmemory_human:500.00M
maxmemory_policy:volatile-lru
allocator_frag_ratio:1.22
allocator_frag_bytes:278992
allocator_rss_ratio:2.64
allocator_rss_bytes:2514944
rss_overhead_ratio:1.35
rss_overhead_bytes:1409024
mem_fragmentation_ratio:6.78
mem_fragmentation_bytes:4655032
mem_not_counted_for_evict:0
mem_replication_backlog:0
mem_clients_slaves:0
mem_clients_normal:0
mem_aof_buffer:0
mem_allocator:jemalloc-5.1.0
active_defrag_running:0
lazyfree_pending_objects:0

# Persistence
loading:0
rdb_changes_since_last_save:0
rdb_bgsave_in_progress:0
rdb_last_save_time:1595693637
rdb_last_bgsave_status:ok
rdb_last_bgsave_time_sec:-1
rdb_current_bgsave_time_sec:-1
rdb_last_cow_size:0
aof_enabled:1
aof_rewrite_in_progress:0
aof_rewrite_scheduled:0
aof_last_rewrite_time_sec:-1
aof_current_rewrite_time_sec:-1
aof_last_bgrewrite_status:ok
aof_last_write_status:ok
aof_last_cow_size:0
module_fork_in_progress:0
module_fork_last_cow_size:0
aof_current_size:0
aof_base_size:0
aof_pending_rewrite:0
aof_buffer_length:0
aof_rewrite_buffer_length:0
aof_pending_bio_fsync:0
aof_delayed_fsync:0

# Stats
total_connections_received:0
total_commands_processed:0
instantaneous_ops_per_sec:0
total_net_input_bytes:0
total_net_output_bytes:0
instantaneous_input_kbps:0.00
instantaneous_output_kbps:0.00
rejected_connections:0
sync_full:0
sync_partial_ok:0
sync_partial_err:0
expired_keys:0
expired_stale_perc:0.00
expired_time_cap_reached_count:0
expire_cycle_cpu_milliseconds:0
evicted_keys:0
keyspace_hits:0
keyspace_misses:0
pubsub_channels:0
pubsub_patterns:0
latest_fork_usec:0
migrate_cached_sockets:0
slave_expires_tracked_keys:0
active_defrag_hits:0
active_defrag_misses:0
active_defrag_key_hits:0
active_defrag_key_misses:0
tracking_total_keys:0
tracking_total_items:0
tracking_total_prefixes:0
unexpected_error_replies:0

# Replication
role:slave
master_host:172.17.0.2
master_port:6379
master_link_status:down
master_last_io_seconds_ago:-1
master_sync_in_progress:0
slave_repl_offset:1
master_link_down_since_seconds:1595693637
slave_priority:100
slave_read_only:1
connected_slaves:0
master_replid:6221de48e9a463b603671d5aee8fde4b83646f7c
master_replid2:0000000000000000000000000000000000000000
master_repl_offset:0
second_repl_offset:-1
repl_backlog_active:0
repl_backlog_size:1048576
repl_backlog_first_byte_offset:0
repl_backlog_histlen:0

# CPU
used_cpu_sys:0.002772
used_cpu_user:0.001386
used_cpu_sys_children:0.000000
used_cpu_user_children:0.000000

# Modules

# Commandstats

# Cluster
cluster_enabled:0

# Keyspace

------ CLIENT LIST OUTPUT ------

------ REGISTERS ------
6662:S 25 Jul 2020 16:13:57.301 #
RAX:0000000000000001 RBX:0000000002088760
RCX:00007ffd9aff2c44 RDX:0000000002088760
RDI:0000000000000000 RSI:0000000002088760
RBP:0000000002088760 RSP:00007ffd9aff2c40
R8 :0000000000000000 R9 :0000000000000000
R10:00007ffd9aff26e0 R11:00007f912a4e4b60
R12:0000000002088760 R13:0000000000000008
R14:0000000000000000 R15:0000000000000002
RIP:00007f912a86deba EFL:0000000000010202
CSGSFS:002b000000000033
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c4f) -> 000000000042f41a
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c4e) -> 0000000000000008
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c4d) -> 0000000000000001
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c4c) -> 0000000000000100
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c4b) -> 00007f912820b480
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c4a) -> 00007f912820b480
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c49) -> 000000000042eb4b
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c48) -> 00007f9128223150
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c47) -> 00000000004c24b0
6662:S 25 Jul 2020 16:13:57.301 # (00007ffd9aff2c46) -> 0000000000000001
6662:S 25 Jul 2020 16:13:57.302 # (00007ffd9aff2c45) -> 0000000000000002
6662:S 25 Jul 2020 16:13:57.302 # (00007ffd9aff2c44) -> 00007f912820d580
6662:S 25 Jul 2020 16:13:57.302 # (00007ffd9aff2c43) -> 00007f912a86e06f
6662:S 25 Jul 2020 16:13:57.302 # (00007ffd9aff2c42) -> 0000000000000008
6662:S 25 Jul 2020 16:13:57.302 # (00007ffd9aff2c41) -> 0000000000000000
6662:S 25 Jul 2020 16:13:57.302 # (00007ffd9aff2c40) -> 0000000002088760

------ MODULES INFO OUTPUT ------

------ FAST MEMORY TEST ------
6662:S 25 Jul 2020 16:13:57.302 # Bio thread for job type #0 terminated
6662:S 25 Jul 2020 16:13:57.302 # Bio thread for job type #1 terminated
6662:S 25 Jul 2020 16:13:57.303 # Bio thread for job type #2 terminated
*** Preparing to test memory region 7bf000 (2281472 bytes)
*** Preparing to test memory region 2061000 (135168 bytes)
*** Preparing to test memory region 2082000 (135168 bytes)
*** Preparing to test memory region 7f9125dfd000 (8388608 bytes)
*** Preparing to test memory region 7f91265fe000 (8388608 bytes)
*** Preparing to test memory region 7f9126dff000 (8388608 bytes)
*** Preparing to test memory region 7f9127600000 (8388608 bytes)
*** Preparing to test memory region 7f9127e00000 (8388608 bytes)
*** Preparing to test memory region 7f9128c2c000 (8192 bytes)
*** Preparing to test memory region 7f9128e46000 (8192 bytes)
*** Preparing to test memory region 7f912a1a8000 (20480 bytes)
*** Preparing to test memory region 7f912a3c5000 (16384 bytes)
*** Preparing to test memory region 7f912a828000 (16384 bytes)
*** Preparing to test memory region 7f912b3bd000 (45056 bytes)
*** Preparing to test memory region 7f912b3cb000 (4096 bytes)
*** Preparing to test memory region 7f912b3cc000 (4096 bytes)
*** Preparing to test memory region 7f912b3cf000 (4096 bytes)
.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O
Fast memory test PASSED, however your memory can still be broken. Please run a memory test for several hours if possible.

------ DUMPING CODE AROUND EIP ------
Symbol: SSL_set_bio (base: 0x7f912a86deb0)
Module: /lib64/libssl.so.10 (base 0x7f912a82c000)
$ xxd -r -p /tmp/dump.hex /tmp/dump.bin
$ objdump --adjust-vma=0x7f912a86deb0 -D -b binary -m i386:x86-64 /tmp/dump.bin
------
6662:S 25 Jul 2020 16:13:57.448 # dump of function (hexdump of 138 bytes):
41544989f4554889d553488b47204889fb4885c07406483b4718743c488b7b104885ff740a4c39e77405e84173fdff488b7b184885ff74104839ef740b483b7b107405e82873fdff4c89631048896b185b5d415cc30f1f00488b50384889571848c7403800000000ebb2660f1f440000488b4710c390662e0f1f840000000000488b4718c390662e0f1f

=== REDIS BUG REPORT END. Make sure to include from START to END. ===

Aditional information

  1. OS distribution and version
  2. Steps to reproduce (if any)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions