Thread 15 "rdk:broker-1" received signal SIGSEGV, Segmentation fault.

[mreouven]

Environment Information

• OS Ubuntu container
• Node Version v18.15.0
• NPM Version 9.5.0
• C++ Toolchain gpp
• node-rdkafka version 2.18.0 latest

Steps to Reproduce

    const consumer = new node_rdkafka_1.KafkaConsumer({
        ...options,
        rebalance_cb: function (err, assignment) {
            return (0, utils_1.onRebalance)(err, assignment, this, _this);
        },
    }, {
        'auto.offset.reset': 'earliest',
    });

dockerfile

---

RUN apt-get update && apt-get install -qq --no-install-recommends -y
ca-certificates
curl
jq
nano
node-gyp
build-essential
python3
librdkafka-dev
&& apt-get clean
&& rm -rf /var/lib/apt/lists/*

---

node-rdkafka Configuration Settings

option=>  {

"group.id": "fi***", "bootstrap.servers": "b***", "security.protocol": "ssl", "sasl.mechanisms": "SCRAM-SHA-512", "sasl.username": "c***", "sasl.password": "c***", "client.id": "find", "group.instance.id": "find", "enable.auto.commit": true, "max.in.flight": 5, "allow.auto.create.topics": false, "session.timeout.ms": 120000, "heartbeat.interval.ms": 30000, }

Additional context i get this error

[c] PID:1 - 11/09/2023, 8:39:02 PM LOG [Fi] Start application listening on group:find url: ["b**"] [New Thread 0x7fffde1fc700 (LWP 50168)] [New Thread 0x7fffdd7fb700 (LWP 50169)] [New Thread 0x7fffdcdfa700 (LWP 50170)] [New Thread 0x7ffd43fff700 (LWP 50171)] [New Thread 0x7ffd435fe700 (LWP 50172)] --Type <RET> for more, q to quit, c to continue without paging--bt

Thread 16 "rdk:broker-1" received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7ffd435fe700 (LWP 50172)] 0x00007fffecff32a3 in SSL_get_peer_certificate () from /usr/lib/x86_64-linux-gnu/libssl.so.1.1

(gdb) bt #0 0x00007fffecff32a3 in SSL_get_peer_certificate () from /usr/lib/x86_64-linux-gnu/libssl.so.1.1 #1 0x00007fffed1fb409 in rd_kafka_transport_ssl_verify (rktrans=0x7ffd34005100) at rdkafka_ssl.c:582 #2 rd_kafka_transport_ssl_handshake (rktrans=rktrans@entry=0x7ffd34005100) at rdkafka_ssl.c:620 #3 0x00007fffed0c1190 in rd_kafka_transport_io_event (rktrans=rktrans@entry=0x7ffd34005100, events=events@entry=1, socket_errstr=0x0) at rdkafka_transport.c:744 #4 0x00007fffed0c1e6c in rd_kafka_transport_io_serve (rktrans=0x7ffd34005100, rkq=, timeout_ms=) at rdkafka_transport.c:1047 #5 0x00007fffed0a9fcc in rd_kafka_broker_ops_io_serve (rkb=rkb@entry=0x7ffd4c05bb50, abs_timeout=9630356814) at rdkafka_broker.c:3568 #6 0x00007fffed0aa4f3 in rd_kafka_broker_consumer_serve (rkb=rkb@entry=0x7ffd4c05bb50, abs_timeout=abs_timeout@entry=9630356814) at rdkafka_broker.c:4271 #7 0x00007fffed0aac89 in rd_kafka_broker_serve (rkb=rkb@entry=0x7ffd4c05bb50, timeout_ms=, timeout_ms@entry=1000) at rdkafka_broker.c:4413 #8 0x00007fffed0ab155 in rd_kafka_broker_thread_main (arg=0x7ffd4c05bb50) at rdkafka_broker.c:4561 #9 0x00007ffff7c7af5a in start_thread (arg=) at pthread_create.c:474 #10 0x00007ffff7b9aa2f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

the segmentation fault is occurring within the SSL_get_peer_certificate function from the libssl library.

need your help thank in advance

[mordae]

Shouldn't node's openssl headers be used when building?

Something along those lines, I believe.

Otherwise one would end up with librdkafka built against system headers and then linked against node's openssl.