[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Subversion 1.7.13 mod_dav_svn with mod_wsgi auth causes Apache segfaults

From: Howard, Larry P <larry.howard_at_Vanderbilt.Edu>
Date: Tue, 29 Oct 2013 12:45:12 +0000

An Apache configuration serving Subversion repositories, with mod_wsgi 3.3 authentication provider, causes per request segfaults in Apache 2.2.22 with mod_dav_svn from Subversion 1.7.13. If mod_wsgi auth directives are removed from the Apache configuration, then repositories are served properly.

The identical configuration with Subversion 1.7.9 (from https://launchpad.net/~svn/+archive/ppa) and the stock Ubuntu 12.04 Subversion 1.6.17 works as expected with mod_wsgi auth directives in place.

Environment:
Ubuntu 12.04.3 LTS (GNU/Linux 3.2.0-55-virtual x86_64)
Apache/2.2.22 (Ubuntu) DAV/2 SVN/1.7.13 mod_wsgi/3.3 Python/2.7.3
Subversion 1.7.13 (http://subversion.apache.org/packages.html Ubuntu Linux: WANdisco)

Loaded Modules:
 core_module (static)
 log_config_module (static)
 logio_module (static)
 mpm_worker_module (static)
 http_module (static)
 so_module (static)
 alias_module (shared)
 auth_basic_module (shared)
 authn_file_module (shared)
 authz_default_module (shared)
 authz_groupfile_module (shared)
 authz_host_module (shared)
 authz_user_module (shared)
 autoindex_module (shared)
 cgid_module (shared)
 dav_module (shared)
 dav_svn_module (shared)
 authz_svn_module (shared)
 deflate_module (shared)
 dir_module (shared)
 env_module (shared)
 mime_module (shared)
 negotiation_module (shared)
 reqtimeout_module (shared)
 setenvif_module (shared)
 status_module (shared)
 wsgi_module (shared)

httpd.conf:

CoreDumpDirectory /tmp/apache2-gdb-dump
LogLevel debug

listen 8080

<VirtualHost *:8080>
    ServerName svn.mydomain.org
    <Location /projects>
        DAV svn
        SVNParentPath /var/lib/svn
        SVNListParentPath Off
        WSGIAccessScript /var/lib/wsgi/access.wsgi
    </Location>
</VirtualHost>

<VirtualHost *:80>
    ServerName svn.mydomain.org
    <Location /projects>
        DAV svn
        SVNParentPath /var/lib//svn
        SVNListParentPath Off
        AuthType Basic
        AuthName "WSGIAuth"
        AuthBasicProvider wsgi
        WSGIAuthUserScript /var/lib/wsgi/access.wsgi
        Require valid-user
        WSGIAuthGroupScript /var/lib/wsgi/access.wsgi
        Require group authorized
    </Location>
</VirtualHost>

access.wsgi:

import logging
logging.basicConfig(format='%(asctime)s %(levelname)s:%(message)s',
                    level=logging.DEBUG)
LOG = logging.getLogger(__name__)

def allow_access(*args, **kwargs):
  LOG.debug("mod_wsgi allow_access called.")
  return True

def check_password(*args, **kwargs):
  LOG.debug("mod_wsgi check_password called.")
  return True

def groups_for_user(*args, **kwargs):
  LOG.debug("mod_wsgi groups_for_user called.")
  return [“authorized”]

Apache error log:

[Tue Oct 29 11:12:45 2013] [warn] mod_wsgi: Compiled for Python/2.7.2+.
[Tue Oct 29 11:12:45 2013] [warn] mod_wsgi: Runtime using Python/2.7.3.
[Tue Oct 29 11:12:45 2013] [notice] Apache/2.2.22 (Ubuntu) DAV/2 SVN/1.7.13 mod_wsgi/3.3 Python/2.7.3 configured -- resuming normal operations
[Tue Oct 29 11:12:45 2013] [info] Server built: Jul 12 2013 13:37:15
[Tue Oct 29 11:12:45 2013] [debug] worker.c(1757): AcceptMutex: sysvsem (default: sysvsem)
[Tue Oct 29 11:12:45 2013] [info] mod_wsgi (pid=11326): Initializing Python.
[Tue Oct 29 11:12:45 2013] [info] mod_wsgi (pid=11325): Initializing Python.
[Tue Oct 29 11:12:45 2013] [info] mod_wsgi (pid=11326): Attach interpreter ''.
[Tue Oct 29 11:12:45 2013] [info] mod_wsgi (pid=11325): Attach interpreter ''.
[Tue Oct 29 11:12:55 2013] [debug] mod_deflate.c(615): [client 129.59.105.145] Zlib: Compressed 481 to 328 : URL /projects/somerepo
[Tue Oct 29 11:12:59 2013] [info] [client <elided>] mod_wsgi (pid=11326, process='', application=''): Loading WSGI script '/var/lib/wsgi/access.wsgi'.
[Tue Oct 29 11:12:59 2013] [info] [client <elided>] mod_wsgi (pid=11325, process='', application=''): Loading WSGI script '/var/lib/wsgi/access.wsgi'.
[Tue Oct 29 11:13:00 2013] [notice] child pid 11325 exit signal Segmentation fault (11), possible coredump in /tmp/apache2-gdb-dump
[Tue Oct 29 11:13:00 2013] [notice] child pid 11326 exit signal Segmentation fault (11), possible coredump in /tmp/apache2-gdb-dump
[Tue Oct 29 11:13:01 2013] [info] mod_wsgi (pid=11384): Initializing Python.
[Tue Oct 29 11:13:01 2013] [info] mod_wsgi (pid=11384): Attach interpreter ''.
[Tue Oct 29 11:13:19 2013] [info] mod_wsgi (pid=11412): Initializing Python.
[Tue Oct 29 11:13:19 2013] [info] mod_wsgi (pid=11412): Attach interpreter ''.
[Tue Oct 29 11:13:21 2013] [info] [client <elided>] mod_wsgi (pid=11384, process='', application=''): Loading WSGI script '/var/lib/wsgi/access.wsgi'.
[Tue Oct 29 11:13:21 2013] [info] [client <elided>] mod_wsgi (pid=11412, process='', application=''): Loading WSGI script '/var/lib/wsgi/access.wsgi'.
[Tue Oct 29 11:13:22 2013] [notice] child pid 11384 exit signal Segmentation fault (11), possible coredump in /tmp/apache2-gdb-dump
[Tue Oct 29 11:13:22 2013] [notice] child pid 11412 exit signal Segmentation fault (11), possible coredump in /tmp/apache2-gdb-dump
[Tue Oct 29 11:13:23 2013] [info] mod_wsgi (pid=11442): Initializing Python.
[Tue Oct 29 11:13:23 2013] [info] mod_wsgi (pid=11442): Attach interpreter ''.

No core dumps were generated.

Apache access log:

svn.mydomain.org:80 <elided> - - [29/Oct/2013:11:12:55 +0000] "OPTIONS /projects/somerepo HTTP/1.1" 401 665 "-" "SVN/1.7.13 neon/0.29.6"
svn.mydomain.org:80 <elided> - - [29/Oct/2013:11:13:18 +0000] "OPTIONS /projects/somerepo HTTP/1.1" 401 720 "-" "SVN/1.7.13 serf/1.2.1”

Subversion client commands:
$ svn co --username somebody http://svn.mydomain.org/projects/somerepo
Authentication realm: <http://svn.mydomain.org:80> WSGIAuth
Password for 'somebody':
svn: E175002: Unable to connect to a repository at URL 'http:/svn.mydomain.org/projects/somerepo'
svn: E175002: OPTIONS of 'http://svn.mydomain.org/projects/somerepo': Could not read status line: connection was closed by server (http://svn.mydomain.org)
$ svn co --config-option servers:global:http-library=serf --username somebody http:///svn.mydomain.org/projects/somerepo
Authentication realm: <http://svn.mydomain.org:80> WSGIAuth
Password for 'somebody':
svn: E120108: Unable to connect to a repository at URL 'http:///svn.mydomain.org/projects/somerepo'
svn: E120108: Error running context: APR does not understand this error code

I appreciate your help in identifying the cause of Apache segfaults with mod_dav_svn from Subversion 1.7.13.

--
Larry Howard, Sr. Research Scientist
Institute for Software Integrated Systems, Vanderbilt University

  • application/pkcs7-signature attachment: smime.p7s
Received on 2013-10-29 13:49:19 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.