[dev.icinga.com #12493] API Remote crash via Google Chrome

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/12493

Created by mfrosch on 2016-08-19 17:06:03 +00:00

Assignee: gbeutner
Status: Resolved (closed on 2016-08-19 18:40:04 +00:00)
Target Version: 2.5.0
Last Update: 2016-08-22 11:41:17 +00:00 (in Redmine)

Icinga Version: 2.4.10-717-gc08ad9f
Backport?: Not yet backported
Include in Changelog: 0

---

Private for now...

Icinga 2 crashes in HTTP library when accessed by Google Chrome

[2016-08-19 18:49:46 +0200] information/HttpServerConnection: Request: GET /v1 (from [10.102.1.11]:39662, user: )
[2016-08-19 18:49:46 +0200] warning/HttpServerConnection: Unauthorized request: GET /v1
[2016-08-19 18:49:54 +0200] information/IdoMysqlConnection: Query queue items: 2, query rate: 6.4/s (384/min 384/5min 384/15min);
[2016-08-19 18:50:02 +0200] information/HttpServerConnection: No messages for Http connection have been received in the last 10 seconds.
icinga2: /usr/include/boost/smart_ptr/intrusive_ptr.hpp:162: T* boost::intrusive_ptr::operator->() const [with T = icinga::Socket]: Assertion `px != 0' failed.
Caught SIGABRT.
Current time: 2016-08-19 18:50:06 +0200

[2016-08-19 18:50:06 +0200] critical/Application: Icinga 2 has terminated unexpectedly. Additional information can be found in '/var/log/icinga2/crash/report.1471625406.463982'

[2016-08-19 18:50:06 +0200] information/ApiListener: New client connection from [10.102.1.11]:39714 (no client certificate)
[2016-08-19 18:50:06 +0200] information/HttpServerConnection: Request: GET /v1 (from [10.102.1.11]:39714, user: )
[2016-08-19 18:50:06 +0200] warning/HttpServerConnection: Unauthorized request: GET /v1

Crash report attached.

Still gathering Information.

The crash happens when you do the following steps in Chrome:

• Open https://icinga2:5665/v1
• Wait on Credential prompt
• Icinga 2 logs "No messages for Http connection have been received in the last 10 seconds"
• Submit, regardless of input
• Crash

Attachments

• report.1471625406.463982 mfrosch - 2016-08-19 17:01:42 +00:00

Changesets

2016-08-19 18:36:27 +00:00 by gbeutner b42bfc8

Fix crash in HttpServerConnection::ProcessMessageAsync

fixes #12493

---

Relations:

• relates #12493

[icinga-migration]

Updated by mfrosch on 2016-08-19 17:09:56 +00:00

Can not reproduce the behavior with openssl s_client

I think this might be connected to some keepalive handling of Chrome, and the line we see here in logs:

[2016-08-19 19:05:27 +0200] warning/ApiListener: No data received on new API connection for identity ''. Ensure that the remote endpoints are properly configured in a cluster setup.

Could this be some HTTP/2 issue?

[icinga-migration]

Updated by mfrosch on 2016-08-19 17:33:28 +00:00

This does not happen in a 2.4.10-1 test setup (Note: single node with API)

[icinga-migration]

Updated by mfrosch on 2016-08-19 17:41:10 +00:00

• Is Private changed from 1 to 0

Removing private, since not reproducible with released version.

[icinga-migration]

Updated by gbeutner on 2016-08-19 18:40:04 +00:00

• Status changed from New to Resolved
• Done % changed from 0 to 100

Applied in changeset b42bfc8.

[icinga-migration]

Updated by gbeutner on 2016-08-22 11:40:55 +00:00

• Priority changed from Immediate to High

[icinga-migration]

Updated by gbeutner on 2016-08-22 11:41:09 +00:00

• Assigned to changed from mfrosch to gbeutner

[icinga-migration]

Updated by gbeutner on 2016-08-22 11:41:17 +00:00

• Include in Changelog changed from 1 to 0

[icinga-migration]

Updated by gbeutner on 2016-08-22 14:37:59 +00:00

• Relates set to 12506