payload: {"action":"created","issue":{"url":"https://api.github.com/repos/haproxy/haproxy/issues/219","repository_url":"https://api.github.com/repos/haproxy/haproxy","labels_url":"https://api.github.com/repos/haproxy/haproxy/issues/219/labels{/name}","comments_url":"https://api.github.com/repos/haproxy/haproxy/issues/219/comments","events_url":"https://api.github.com/repos/haproxy/haproxy/issues/219/events","html_url":"https://github.com/haproxy/haproxy/issues/219","id":480379871,"node_id":"MDU6SXNzdWU0ODAzNzk4NzE=","number":219,"title":"HAPROXY 2.0.4 segfault https front end to http back end with htx enabled","user":{"login":"paradizelost","id":22059408,"node_id":"MDQ6VXNlcjIyMDU5NDA4","avatar_url":"https://avatars0.githubusercontent.com/u/22059408?v=4","gravatar_id":"","url":"https://api.github.com/users/paradizelost","html_url":"https://github.com/paradizelost","followers_url":"https://api.github.com/users/paradizelost/followers","following_url":"https://api.github.com/users/paradizelost/following{/other_user}","gists_url":"https://api.github.com/users/paradizelost/gists{/gist_id}","starred_url":"https://api.github.com/users/paradizelost/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paradizelost/subscriptions","organizations_url":"https://api.github.com/users/paradizelost/orgs","repos_url":"https://api.github.com/users/paradizelost/repos","events_url":"https://api.github.com/users/paradizelost/events{/privacy}","received_events_url":"https://api.github.com/users/paradizelost/received_events","type":"User","site_admin":false},"labels":[{"id":1197549808,"node_id":"MDU6TGFiZWwxMTk3NTQ5ODA4","url":"https://api.github.com/repos/haproxy/haproxy/labels/status:%20needs-triage","name":"status: needs-triage","color":"d34c62","default":false},{"id":895784997,"node_id":"MDU6TGFiZWw4OTU3ODQ5OTc=","url":"https://api.github.com/repos/haproxy/haproxy/labels/type:%20bug","name":"type: bug","color":"d73a4a","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2019-08-13T21:34:34Z","updated_at":"2019-08-14T04:01:59Z","closed_at":null,"author_association":"NONE","body":"<!--\r\n\r\nWelcome! - We kindly ask that you:\r\n\r\n  1. Fill out the issue template below - not doing so needs a good reason.\r\n  2. Use the forum or the mailing list if you have a question rather than a bug or feature request.\r\n\r\nThe forum is at: https://discourse.haproxy.org/\r\n\r\nThe mailing list (no need to subscribe) is: haproxy@formilux.org\r\nSubscribe to the list: haproxy+subscribe@formilux.org\r\nUnsubscribe from the list: haproxy+unsubscribe@formilux.org\r\n\r\nForum and mailing list are correct places for questions about HAProxy or general suggestions\r\nand topics, e.g. usage or documentation questions! This issue tracker is for tracking bugs and\r\nfeature requests directly relating to the development of the software itself.\r\n\r\nThanks for understanding, and for contributing to the project!\r\n\r\n-->\r\n\r\n## Output of `haproxy -vv` and `uname -a`\r\n\r\n<!-- Put it in code blocks ```: -->\r\n```\r\nHA-Proxy version 2.0.4 2019/08/06 - https://haproxy.org/\r\nBuild options :\r\n  TARGET  = linux-glibc\r\n  CPU     = generic\r\n  CC      = gcc\r\n  CFLAGS  = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement -fwrapv -Wno-format-truncation -Wno-unused-label -Wno-sign-compare -Wno-unused-parameter -Wno-old-style-declaration -Wno-ignored-qualifiers -Wno-clobbered -Wno-missing-field-initializers -Wno-implicit-fallthrough -Wno-stringop-overflow -Wno-cast-function-type -Wtype-limits -Wshift-negative-value -Wshift-overflow=2 -Wduplicated-cond -Wnull-dereference\r\n  OPTIONS = USE_PCRE2=1 USE_PCRE2_JIT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_ZLIB=1\r\n\r\nFeature list : +EPOLL -KQUEUE -MY_EPOLL -MY_SPLICE +NETFILTER -PCRE -PCRE_JIT +PCRE2 +PCRE2_JIT +POLL -PRIVATE_CACHE +THREAD -PTHREAD_PSHARED -REGPARM -STATIC_PCRE -STATIC_PCRE2 +TPROXY +LINUX_TPROXY +LINUX_SPLICE +LIBCRYPT +CRYPT_H -VSYSCALL +GETADDRINFO +OPENSSL +LUA +FUTEX +ACCEPT4 -MY_ACCEPT4 +ZLIB -SLZ +CPU_AFFINITY +TFO +NS +DL +RT -DEVICEATLAS -51DEGREES -WURFL -SYSTEMD -OBSOLETE_LINKER +PRCTL +THREAD_DUMP -EVPORTS\r\n\r\nDefault settings :\r\n  bufsize = 16384, maxrewrite = 1024, maxpollevents = 200\r\n\r\nBuilt with multi-threading support (MAX_THREADS=64, default=4).\r\nBuilt with OpenSSL version : OpenSSL 1.1.1c  28 May 2019\r\nRunning on OpenSSL version : OpenSSL 1.1.1c  28 May 2019\r\nOpenSSL library supports TLS extensions : yes\r\nOpenSSL library supports SNI : yes\r\nOpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3\r\nBuilt with Lua version : Lua 5.3.3\r\nBuilt with network namespace support.\r\nBuilt with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND\r\nBuilt with zlib version : 1.2.11\r\nRunning on zlib version : 1.2.11\r\nCompression algorithms supported : identity(\"identity\"), deflate(\"deflate\"), raw-deflate(\"deflate\"), gzip(\"gzip\")\r\nBuilt with PCRE2 version : 10.32 2018-09-10\r\nPCRE2 library supports JIT : yes\r\nEncrypted password support via crypt(3): yes\r\nBuilt with the Prometheus exporter as a service\r\n\r\nAvailable polling systems :\r\n      epoll : pref=300,  test result OK\r\n       poll : pref=200,  test result OK\r\n     select : pref=150,  test result OK\r\nTotal: 3 (3 usable), will use epoll.\r\n\r\nAvailable multiplexer protocols :\r\n(protocols marked as <default> cannot be specified using 'proto' keyword)\r\n              h2 : mode=HTX        side=FE|BE     mux=H2\r\n              h2 : mode=HTTP       side=FE        mux=H2\r\n       <default> : mode=HTX        side=FE|BE     mux=H1\r\n       <default> : mode=TCP|HTTP   side=FE|BE     mux=PASS\r\n\r\nAvailable services :\r\n        prometheus-exporter\r\n\r\nAvailable filters :\r\n        [SPOE] spoe\r\n        [COMP] compression\r\n        [CACHE] cache\r\n        [TRACE] trace\r\n```\r\n\r\n```\r\nLinux haproxy 4.19.0-5-amd64 #1 SMP Debian 4.19.37-5 (2019-06-19) x86_64 GNU/Linux\r\n```\r\n\r\n## What's the configuration?\r\n\r\n```\r\nglobal\r\n#        chroot /var/lib/haproxy\r\n\tlog 10.0.2.112 local0\r\n\tlog stderr local0\r\n        daemon\r\n        tune.ssl.default-dh-param 2048\r\n\r\n        # Default SSL material locations\r\n        ca-base /etc/haproxy/ssl/certs\r\n        crt-base /etc/haproxy/ssl\r\n\r\n        # Default ciphers to use on SSL-enabled listening sockets.\r\n        # For more information, see ciphers(1SSL). This list is from:\r\n        #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/\r\n        ssl-default-bind-ciphers TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256:TLS13-CHACHA20-POLY1305-SHA256:EECDH+CHACHA20:ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES\r\n        ssl-default-server-ciphers TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256:TLS13-CHACHA20-POLY1305-SHA256:EECDH+CHACHA20:ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES\r\n        ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets\r\n\r\nmailers mta\r\nmailer hostname smtp.midco.net:25\r\n\r\ndefaults\r\n        log     global\r\n#        option  http-server-close\r\n#        option  redispatch\r\n#        option  dontlognull\r\n        timeout connect 50000\r\n        timeout client  50000\r\n        timeout server  50000\r\n#\tretries 5\r\n\r\n\temail-alert mailers mta\r\n       email-alert level alert\r\n       email-alert from haproxy@mydomain.net\r\n       email-alert to danmydomain@gmail.com\r\n\r\n#        errorfile 400 /usr/local/etc/haproxy/errors/400.http\r\n#        errorfile 403 /usr/local/etc/haproxy/errors/403.http\r\n#        errorfile 408 /usr/local/etc/haproxy/errors/408.http\r\n#        errorfile 500 /usr/local/etc/haproxy/errors/500.http\r\n#        errorfile 502 /usr/local/etc/haproxy/errors/502.http\r\n#        errorfile 503 /etc/haproxy/errors/503.http\r\n#        errorfile 504 /etc/haproxy/errors/504.http\r\n\r\n#frontend www-stats\r\n#        bind 0.0.0.0:8080\r\n#        mode http\r\n#        stats enable\r\n#        stats uri /\r\n#        stats realm Haproxy\\ Statistics\r\n#        stats auth <user>:<password>\r\n\r\n\r\n\r\nfrontend www-http\r\n        mode http\r\n        bind 0.0.0.0:80\r\n        redirect scheme https\r\n\r\nfrontend www-https\r\n        mode tcp\r\n\ttimeout server 8h\r\n\ttimeout connect 30s\r\n\ttimeout client 10m\t\r\n#\toption tcplog\r\n#\toption tcpka\r\n#\tcontimeout 9999\r\n#\tclitimeout 99999\r\n#\tsrvtimeout 99999\r\n        bind 0.0.0.0:443 ssl crt mydomain.net.pem\r\n#        tcp-request inspect-delay 5s\r\n#\ttimeout client 3h\r\n\thttp-response set-header Strict-Transport-Security max-age=31356000;\\ includeSubdomains;\\ preload\r\n\thttp-response set-header X-Frame-Options DENY\r\n\thttp-response set-header X-Content-Type-Options nosniff\r\n#        tcp-request content accept if { req_ssl_hello_type 1 }\r\n        #use_backend www-RDP if { ssl_fc_sni -i remote.mydomain.net }\r\n        #use_backend www-RDP if { ssl_fc_sni -i r.mydomain.net }\r\n        use_backend www-guac if { ssl_fc_sni -i guac.mydomain.net }\r\n        use_backend www-nsman if { ssl_fc_sni -i nsman.mydomain.net }\r\n        use_backend www-switch if { ssl_fc_sni -i dellswitch.mydomain.net }\r\n        use_backend www-unifi if { ssl_fc_sni -i unifi.mydomain.net }\r\n        #use_backend www-nsg if { ssl_fc_sni -i ns.mydomain.net }\r\n        use_backend www-apc if { ssl_fc_sni -i battery.mydomain.net }\r\n        use_backend www_ipmiserver if { ssl_fc_sni -i serveripmi.mydomain.net }\r\n        use_backend www_babycam if { ssl_fc_sni -i mydomainbabycam.mydomain.net }\r\n        use_backend www-octoprint if { ssl_fc_sni -i octoprint.mydomain.net }\r\n        use_backend www-splunk if { ssl_fc_sni -i splunk.mydomain.net }\r\n        use_backend www-plex if { ssl_fc_sni -i plex.mydomain.net }\r\n        use_backend www-irc if { ssl_fc_sni -i irc.mydomain.net }\r\n\tuse_backend www-stats if { ssl_fc_sni -i mystats.mydomain.net }\r\n\tuse_backend www-ststats if { ssl_fc_sni -i ststats.mydomain.net }\r\n\tuse_backend www-wd if { ssl_fc_sni -i wd.mydomain.net }\r\n\tuse_backend www-freenas if { ssl_fc_sni -i freenas.mydomain.net }\r\n\tuse_backend www-homeassistant if { ssl_fc_sni -i homecontrol.mydomain.net }\r\n\tuse_backend www-kanboard if { ssl_fc_sni -i kanboard.mydomain.net }\r\n\tuse_backend www-docs if { ssl_fc_sni -i docs.mydomain.net }\r\n#\tuse_backend haproxy-test if { ssl_fc_sni -i test-haproxy.mydomain.net }\r\n#\tuse_backend www-docs-test if { ssl_fc_sni -i testdocs.mydomain.net }\r\n\r\n\r\n\t\r\n\r\nbackend www-RDP\r\n        mode tcp\r\n        timeout server 8h\r\n        timeout connect 30s\r\n        server dc 10.0.0.15:443 ssl check verify none\r\n\r\nbackend www-irc\r\n        mode http\r\n        server irc 10.0.2.21:9000 check\r\n\r\nbackend www-ststats\r\n        mode http\r\n        server irc 10.0.2.21:5000 check\r\n\r\nbackend www-stats\r\n        mode http\r\n        server irc 10.0.2.21:8081 check\r\n\r\nbackend www-nsg\r\n        mode tcp\r\n        timeout server 8h\r\n        timeout connect 30s\r\n        server ns 10.0.2.27:443 check ssl verify none\r\n\r\nbackend www-octoprint\r\n        mode http\r\n        server octoprint 10.0.3.18:80 check\r\n\r\nbackend www_ipmiserver\r\n\tmode http\r\n\tserver impiserver 10.0.0.100:443 ssl check verify none\r\n\r\nbackend www-plex\r\n\tmode http\r\n\tserver plex 10.0.0.122:32400 ssl check verify none\r\n\r\nbackend www-splunk\r\n\tmode http\r\n\tserver splunk 10.0.2.112:8000 check\r\n\r\nbackend www_babycam\r\n\tmode http\r\n\tbalance source\r\n\tserver-template henrycam 3 _http._tcp.henrycam.docker.lan.mydomain.net resolvers int check\r\n\r\n\r\nbackend www-wd\r\n\tmode http\r\n\tserver ovman 10.0.0.102:443 ssl check verify none\r\n\r\nbackend www-freenas\r\n\tmode http\r\n\tserver freenas 10.0.0.111:80 check\r\n\r\nbackend www-homeassistant\r\n\tmode http\r\n\tserver homecontrol 10.0.2.21:8123 check send-proxy\r\n\r\nbackend www-nsman\r\n        mode http\r\n        server netscaler 10.0.2.10:443 ssl check verify none\r\n\r\n\r\nbackend www-apc\r\n        mode http\r\n\toption httpchk\r\n        server apc 192.168.1.219:80 \r\n\r\nbackend www-guac\r\n        mode http\r\n\thttp-request set-path %[path,regsub(^/,/guacamole/)]\r\n        server guacamole 10.0.2.21:8080 check port 8080 verify none\r\n#\tbalance source\r\n#\tserver-template guack-back 3 _http._tcp.guacamole.docker.lan.mydomain.net resolvers int check\r\n\r\nbackend www-switch\r\n        mode http\r\n        server dellswitch 10.0.1.2:80 check\r\n\r\nbackend www-unifi\r\n\tmode http\r\n\tserver unifi 10.0.2.23:8443 ssl check verify none\r\n\t\r\nbackend www-kanboard\r\n\tmode http\r\n\tserver kanboard 10.0.2.21:88 check\r\n\r\nbackend www-docs\r\n\tmode http\r\n\tserver mayanedms 10.0.2.21:85 check\r\n#\tserver mayanedms mayan-edms-app.mayanedms:8000\r\n\r\n\r\nfrontend www-stats\r\n        bind 0.0.0.0:8080\r\n        mode http\r\n        stats enable\r\n\t\r\n        stats uri /\r\n        stats realm Haproxy\\ Statistics\r\n        stats auth admin:admin\r\n\tstats show-node \"${DOCKER_HOST}\"\r\n\r\nresolvers int\r\n\tnameserver fw 10.0.2.1:53\r\n```\r\n\r\n## Steps to reproduce the behavior\r\n\r\nStart docker container with attached config. Will run until it starts processing traffic to a defined back-end. then will segfault\r\n\r\n## Actual behavior\r\nsegfaults with message\r\n[ALERT] 224/204926 (1) : Current worker #1 (6) exited with code 139 (Segmentation fault)\r\n\r\n## Expected behavior\r\n\r\nnot segfault\r\n\r\n## Do you have any idea what may have caused this?\r\n\r\nWorks properly in 2.0.3 with exact same config, updating to 2.0.4 causes issue.\r\n\r\n## Do you have an idea how to solve the issue?\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/haproxy/haproxy/issues/comments/521093375","html_url":"https://github.com/haproxy/haproxy/issues/219#issuecomment-521093375","issue_url":"https://api.github.com/repos/haproxy/haproxy/issues/219","id":521093375,"node_id":"MDEyOklzc3VlQ29tbWVudDUyMTA5MzM3NQ==","user":{"login":"wtarreau","id":8141789,"node_id":"MDQ6VXNlcjgxNDE3ODk=","avatar_url":"https://avatars0.githubusercontent.com/u/8141789?v=4","gravatar_id":"","url":"https://api.github.com/users/wtarreau","html_url":"https://github.com/wtarreau","followers_url":"https://api.github.com/users/wtarreau/followers","following_url":"https://api.github.com/users/wtarreau/following{/other_user}","gists_url":"https://api.github.com/users/wtarreau/gists{/gist_id}","starred_url":"https://api.github.com/users/wtarreau/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wtarreau/subscriptions","organizations_url":"https://api.github.com/users/wtarreau/orgs","repos_url":"https://api.github.com/users/wtarreau/repos","events_url":"https://api.github.com/users/wtarreau/events{/privacy}","received_events_url":"https://api.github.com/users/wtarreau/received_events","type":"User","site_admin":false},"created_at":"2019-08-14T04:01:59Z","updated_at":"2019-08-14T04:01:59Z","author_association":"NONE","body":"Ah cool, thank you :-)\r\nThen I'm closing the issue as fixed! I think we'll issue 2.0.5 soon, I just want to have a look at the few other pending issues first.\r\n"}}
other: {"actor":{"display_login":"wtarreau"}}