☰

Tang 因 SEGV 失败

tag-icon • tag-icon segmentation-fault
Tang 因 SEGV 失败

我有一个唐服务器（U形夹/唐）在 Linux 容器（LXD）中。

根据 tangd.socket 配置，tangd 服务器在通过 TCP 端口 80 接收连接时启动：

root@tang2:~# systemctl cat tangd.socket
# /lib/systemd/system/tangd.socket
[Unit]
Description=Tang Server socket
Requires=tangd-update.service
Requires=tangd-update.path
After=tangd-update.service

[Socket]
ListenStream=80
Accept=true

[Install]
WantedBy=multi-user.target

连接时，服务器启动，但由于分段错误而立即被终止：

Jan 21 16:10:19 tang2 systemd[1]: Started Tang Server (10.0.0.122:50186).
Jan 21 16:10:19 tang2 systemd[1]: [email protected]:80-10.0.0.122:50186.service: Main process exited, code=killed, status=11/SEGV
Jan 21 16:10:19 tang2 systemd[1]: [email protected]:80-10.0.0.122:50186.service: Failed with result 'signal'.

在我看来，容器有足够的可用内存：

root@tang2:~# free -h
              total        used        free      shared  buff/cache   available
Mem:          7.8Gi        32Mi       7.6Gi       6.0Mi       184Mi       7.8Gi
Swap:            0B          0B          0B

更多信息：

root@tang2:~# ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 31790
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1048576
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) unlimited
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

SO 是 Debian Linux 10 (Buster)

root@tang2:~# cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

唐包信息：

Package: tang
Version: 7-1+deb10u1
State: installed
Automatically installed: no
Priority: optional
Section: net
Maintainer: Christoph Biedl <[email protected]>
Architecture: amd64
Uncompressed Size: 66.6 k
Depends: libc6 (>= 2.8), libhttp-parser2.8 (>= 2.1), libjansson4 (>= 2.10~), libjose0 (>= 10), jose
Description: network-based cryptographic binding server
 Tang is a service for binding cryptographic keys to network presence. It offers a secure, stateless, anonymous
 alternative to key escrow services.
Homepage: https://github.com/latchset/tang

root@tang2:~# ldd /usr/lib/x86_64-linux-gnu/tangd
        linux-vdso.so.1 (0x00007fffb88f6000)
        libjose.so.0 => /usr/lib/x86_64-linux-gnu/libjose.so.0 (0x00007f1df6639000)
        libjansson.so.4 => /usr/lib/x86_64-linux-gnu/libjansson.so.4 (0x00007f1df662a000)
        libhttp_parser.so.2.8 => /usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.8 (0x00007f1df661f000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1df645e000)
        libcrypto.so.1.1 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1 (0x00007f1df6175000)
        libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f1df5f57000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f1df5f34000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f1df6864000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f1df5f2f000)

我尝试使用 telnet 连接到 tang 服务器并 strace 服务器：

root@tang2:~# telnet localhost 80
Trying ::1...
Connected to localhost.
Escape character is '^]'.
GET /adv HTTP/1.0
Connection closed by foreign host.

这是 strace 输出：

root@tang2:~# ps ax|grep tang
  995 ?        Ss     0:00 /usr/lib/x86_64-linux-gnu/tangd /var/cache/tang
  997 pts/2    S+     0:00 grep tang
root@tang2:~# strace -f -p 995
strace: Process 995 attached
read(0, "GET /adv HTTP/1.0\r\n", 4095)  = 19
--- SIGSEGV {si_signo=SIGSEGV, si_code=SI_KERNEL, si_addr=NULL} ---
+++ killed by SIGSEGV +++

你知道tangd服务器为什么被杀吗？

这是来自正在运行的 tang 服务器的跟踪：

read(0, "GET /adv HTTP/1.0\r\n", 4095)  = 19
read(0, "\r\n", 4095)                   = 2
write(2, "::1 GET /adv", 12)            = 12
open("/var/cache/tang/default.jws", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=956, ...}) = 0
fstat(3, {st_mode=S_IFREG|0644, st_size=956, ...}) = 0
read(3, "{\"payload\":\"eyJrZXlzIjpbeyJhbGci"..., 4096) = 956
write(2, " => 200 (src/tangd.c:85)\n", 25) = 25
fstat(1, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
lseek(1, 0, SEEK_CUR)                   = -1 ESPIPE (Illegal seek)
write(1, "HTTP/1.1 200 OK\r\n", 17)     = 17
fstat(1, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
lseek(1, 0, SEEK_CUR)                   = -1 ESPIPE (Illegal seek)
write(1, "Content-Type: application/jose+j"..., 1016) = 1016
close(3)                                = 0
read(0, "\r\n", 4095)                   = 2
read(0, "", 4095)                       = 0
exit_group(0)                           = ?
+++ exited with 0 +++

问候，

答案1

好的，所以我将系统从 Buster 更新为 Bullseye，tangd 服务器开始工作。也许Buster tangd的上一个版本存在一些错误。

相关内容