Thread 15 "rdk:broker-1" received signal SIGSEGV, Segmentation fault.

[mreouven]

Environment Information

• OS Ubuntu container
• Node Version v18.15.0
• NPM Version 9.5.0
• C++ Toolchain gpp
• node-rdkafka version 2.18.0 latest

Steps to Reproduce

    const consumer = new node_rdkafka_1.KafkaConsumer({
        ...options,
        rebalance_cb: function (err, assignment) {
            return (0, utils_1.onRebalance)(err, assignment, this, _this);
        },
    }, {
        'auto.offset.reset': 'earliest',
    });

dockerfile

---

RUN apt-get update && apt-get install -qq --no-install-recommends -y
ca-certificates
curl
jq
nano
node-gyp
build-essential
python3
librdkafka-dev
&& apt-get clean
&& rm -rf /var/lib/apt/lists/*

---

node-rdkafka Configuration Settings

option=>  {

"group.id": "fi***",
"bootstrap.servers": "b***",
"security.protocol": "ssl",
"sasl.mechanisms": "SCRAM-SHA-512",
"sasl.username": "c***",
"sasl.password": "c***",
"client.id": "find",
"group.instance.id": "find",
"enable.auto.commit": true,
"max.in.flight": 5,
"allow.auto.create.topics": false,
"session.timeout.ms": 120000,
"heartbeat.interval.ms": 30000,
}

Additional context
i get this error

[c] PID:1 - 11/09/2023, 8:39:02 PM LOG [Fi] Start application listening on group:find url: ["b**"]
[New Thread 0x7fffde1fc700 (LWP 50168)]
[New Thread 0x7fffdd7fb700 (LWP 50169)]
[New Thread 0x7fffdcdfa700 (LWP 50170)]
[New Thread 0x7ffd43fff700 (LWP 50171)]
[New Thread 0x7ffd435fe700 (LWP 50172)]
--Type for more, q to quit, c to continue without paging--bt

Thread 16 "rdk:broker-1" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffd435fe700 (LWP 50172)]
0x00007fffecff32a3 in SSL_get_peer_certificate () from /usr/lib/x86_64-linux-gnu/libssl.so.1.1

(gdb) bt
#0 0x00007fffecff32a3 in SSL_get_peer_certificate () from /usr/lib/x86_64-linux-gnu/libssl.so.1.1
#1 0x00007fffed1fb409 in rd_kafka_transport_ssl_verify (rktrans=0x7ffd34005100) at rdkafka_ssl.c:582
#2 rd_kafka_transport_ssl_handshake (rktrans=rktrans@entry=0x7ffd34005100) at rdkafka_ssl.c:620
#3 0x00007fffed0c1190 in rd_kafka_transport_io_event (rktrans=rktrans@entry=0x7ffd34005100, events=events@entry=1,
socket_errstr=0x0) at rdkafka_transport.c:744
#4 0x00007fffed0c1e6c in rd_kafka_transport_io_serve (rktrans=0x7ffd34005100, rkq=, timeout_ms=)
at rdkafka_transport.c:1047
#5 0x00007fffed0a9fcc in rd_kafka_broker_ops_io_serve (rkb=rkb@entry=0x7ffd4c05bb50, abs_timeout=9630356814)
at rdkafka_broker.c:3568
#6 0x00007fffed0aa4f3 in rd_kafka_broker_consumer_serve (rkb=rkb@entry=0x7ffd4c05bb50, abs_timeout=abs_timeout@entry=9630356814)
at rdkafka_broker.c:4271
#7 0x00007fffed0aac89 in rd_kafka_broker_serve (rkb=rkb@entry=0x7ffd4c05bb50, timeout_ms=, timeout_ms@entry=1000)
at rdkafka_broker.c:4413
#8 0x00007fffed0ab155 in rd_kafka_broker_thread_main (arg=0x7ffd4c05bb50) at rdkafka_broker.c:4561
#9 0x00007ffff7c7af5a in start_thread (arg=) at pthread_create.c:474
#10 0x00007ffff7b9aa2f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

the segmentation fault is occurring within the SSL_get_peer_certificate function from the libssl library.

need your help thank in advance

[mordae]

Shouldn't node's openssl headers be used when building?

Something along those lines, I believe.

Otherwise one would end up with librdkafka built against system headers and then linked against node's openssl.