From owner-freebsd-questions@FreeBSD.ORG Thu May 24 04:31:26 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 5D32B16A400 for ; Thu, 24 May 2007 04:31:26 +0000 (UTC) (envelope-from youshi10@u.washington.edu) Received: from mxout1.cac.washington.edu (mxout1.cac.washington.edu [140.142.32.134]) by mx1.freebsd.org (Postfix) with ESMTP id 3E8AB13C447 for ; Thu, 24 May 2007 04:31:26 +0000 (UTC) (envelope-from youshi10@u.washington.edu) Received: from smtp.washington.edu (smtp.washington.edu [140.142.32.139]) by mxout1.cac.washington.edu (8.13.7+UW06.06/8.13.7+UW07.03) with ESMTP id l4O4VPLv010153 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 23 May 2007 21:31:25 -0700 X-Auth-Received: from [192.168.10.45] (c-67-166-149-71.hsd1.ca.comcast.net [67.166.149.71]) (authenticated authid=youshi10) by smtp.washington.edu (8.13.7+UW06.06/8.13.7+UW07.03) with ESMTP id l4O4VOVP028155 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 23 May 2007 21:31:25 -0700 Message-ID: <46551546.7000400@u.washington.edu> Date: Wed, 23 May 2007 21:32:06 -0700 From: Garrett Cooper User-Agent: Thunderbird 2.0.0.0 (Windows/20070326) MIME-Version: 1.0 To: PeterPluta , freebsd-questions@freebsd.org References: <10771250.post@talk.nabble.com> <20070523202813.GA3705@slackbox.xs4all.nl> In-Reply-To: <20070523202813.GA3705@slackbox.xs4all.nl> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-PMX-Version: 5.3.1.294258, Antispam-Engine: 2.5.1.298604, Antispam-Data: 2007.5.23.211434 X-Uwash-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0, __USER_AGENT 0' Cc: Subject: Re: Security Run Output Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 May 2007 04:31:26 -0000 Roland Smith wrote: > On Wed, May 23, 2007 at 12:40:19PM -0700, PeterPluta wrote: >> I see this quite regularly. What exactly is the http process doing? I'm >> guessing this is the master process stopping and restarting when I rotate >> logs or something. Can anyone confirm? There is usally more processes, 10-15 >> or more. >> >> kernel log messages: >> +++ /tmp/security.ioLB2PiJ Wed May 23 03:01:42 2007 >> +pid 30865 (httpd), uid 80: exited on signal 4 > > According to signal(3), signal 4 is SIGILL; illegal instruction. > > Not sure what triggers that. Maybe a stack overflow bug that writes a > bogus value to a return address? > > Roland Are you running CURRENT and did you update to GCC 4.2 and install httpd lately? If so, you need to read a few threads on the current@ list pertaining to GCC 4.2 written in the past 1-2 weeks. -Garrett