Package: squid
Version: 4.6-1+deb10u4
Severity: normal

Dear Maintainer,

Squid segfaults but seems usable.  No segfaults until this current version 
(4.6-1+deb10u4). 

Here are some sample kern.log output:

Aug 31 11:02:17 chromebox kernel: [   12.642751] squid[509]: segfault at 
99e00000981 ip 00007ff47e3b29bd sp 00007ffd2d4cb8a0 error 4 in 
libc-2.28.so[7ff47e350000+148000]
Aug 31 11:02:27 chromebox kernel: [   22.692706] squid[733]: segfault at a51f 
ip 00007f70452209bd sp 00007ffdaa96f830 error 4 in 
libc-2.28.so[7f70451be000+148000]
Aug 31 11:17:53 chromebox kernel: [  948.885810] squid[849]: segfault at 173c 
ip 00007f55c22c49bd sp 00007ffe1ff323e0 error 4 in 
libc-2.28.so[7f55c2262000+148000]
Aug 31 11:18:03 chromebox kernel: [  958.912126] squid[4054]: segfault at 
5460000052f ip 00007fba5140f9bd sp 00007ffc62348330 error 4 in 
libc-2.28.so[7fba513ad000+148000]
Aug 31 11:18:23 chromebox kernel: [  978.941719] squid[4087]: segfault at 
8fd000008e8 ip 00007ff67de529bd sp 00007ffc22d08c50 error 4 in 
libc-2.28.so[7ff67ddf0000+148000]
Aug 31 15:22:01 chromebox kernel: [   12.326735] squid[610]: segfault at 
99e00000981 ip 00007f779d2269bd sp 00007ffde0b728b0 error 4 in 
libc-2.28.so[7f779d1c4000+148000]

-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-10-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages squid depends on:
ii  adduser                  3.118
ii  libc6                    2.28-10
ii  libcap2                  1:2.25-2
ii  libcom-err2              1.44.5-1+deb10u3
ii  libdb5.3                 5.3.28+dfsg1-0.5
ii  libdbi-perl              1.642-1+b1
ii  libecap3                 1.0.1-3.2
ii  libexpat1                2.2.6-2+deb10u1
ii  libgcc1                  1:8.3.0-6
ii  libgnutls30              3.6.7-4+deb10u5
ii  libgssapi-krb5-2         1.17-3
ii  libkrb5-3                1.17-3
ii  libldap-2.4-2            2.4.47+dfsg-3+deb10u2
ii  libltdl7                 2.4.6-9
ii  libnetfilter-conntrack3  1.0.7-1
ii  libnettle6               3.4.1-1
ii  libpam0g                 1.3.1-5
ii  libsasl2-2               2.1.27+dfsg-1+deb10u1
ii  libstdc++6               8.3.0-6
ii  libxml2                  2.9.4+dfsg1-7+b3
ii  logrotate                3.14.0-4
ii  lsb-base                 10.2019051400
ii  netbase                  5.6
ii  squid-common             4.6-1+deb10u4

Versions of packages squid recommends:
ii  ca-certificates  20200601~deb10u1
ii  libcap2-bin      1:2.25-2

Versions of packages squid suggests:
ii  resolvconf   1.79
pn  smbclient    <none>
pn  squid-cgi    <none>
pn  squid-purge  <none>
pn  squidclient  <none>
pn  ufw          <none>
pn  winbind      <none>

-- Configuration Files:
/etc/squid/squid.conf changed:
acl localnet src 10.0.0.0/8    # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16        # RFC1918 possible internal network
acl ssl_ports port 443
acl ssl_ports port 5222         # xmpp
acl safe_ports port 80          # http
acl safe_ports port 21          # ftp
acl safe_ports port 443         # https
acl safe_ports port 70          # gopher
acl safe_ports port 210         # wais
acl safe_ports port 1025-65535  # unregistered ports
acl safe_ports port 280         # http-mgmt
acl safe_ports port 488         # gss-http
acl safe_ports port 591         # filemaker
acl safe_ports port 777         # multiling http
acl connect method connect
acl ads dstdom_regex -i "/etc/squid/squid.adservers.regex"
http_access deny ads
http_access deny !safe_ports
http_access deny connect !ssl_ports
acl manager url_regex -i ^cache_object:// /squid-internal-mgr/
http_access allow localnet manager
http_access allow localhost manager
http_access deny manager
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128
cache_replacement_policy heap LFUDA
maximum_object_size 500 MB
cache deny all
log_mime_hdrs off
coredump_dir /var/spool/squid
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200 override-expire 
ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90% 432000 
override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$ 10080 
90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.index\.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320
negative_dns_ttl 10 seconds
connect_timeout 10 seconds
log_icp_queries off
dns_v4_first on
dns_nameservers 127.0.0.1


-- no debconf information

Reply via email to