Hello,

Thanks a lot for your answer.
The machine runs CentOS5 (PCRE from repository).
I must say, we never had a single crash - not even once.
If we `telnet` the above request, NGINX crashes immediately.
For full config or core-dumps please contact us per email:
sandyherman [at] gmx [dot] net

Thanks a lot
Sandy


# "http_fastcgi_module", "http_limit_conn_module", "http_limit_req_module"
./configure --prefix=/usr/local/nginx --user=www --group=www --with-pcre
--without-http_charset_module --without-http_gzip_module --without-http_ssi_module --without-http_userid_module
--without-http_autoindex_module --without-http_geo_module --without-http_split_clients_module
--without-http_referer_module --without-http_proxy_module --without-http_uwsgi_module --without-http_scgi_module
--without-http_memcached_module --without-http_empty_gif_module --without-http_browser_module
--without-http_upstream_ip_hash_module
--without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module


(gdb) fr 2
#2 0x000000000046d5d2 in ngx_http_limit_req_handler (r=0x1b99faa0) at src/http/modules/ngx_http_limit_req_module.c:192
192 in src/http/modules/ngx_http_limit_req_module.c

(gdb) p *limit
$1 = {shm_zone = 0x1b9319e8, burst = 10000, nodelay = 0}

(gdb) p *ctx
$2 = {sh = 0x2af913765000, shpool = 0x2af913735000, rate = 2000, index = 2, var = {len = 9, data = 0x1b9580f9 "ipaddress"}, node = 0x0}

(gdb) p *vv
$3 = {len = 194343136, valid = 1, no_cacheable = 0, not_found = 0, escape = 0, data = 0x0}

(gdb) p *r
$4 = {signature = 1347703880, connection = 0x2af91b73d258, ctx = 0x1b999f70, main_conf = 0x1b932068, srv_conf = 0x1b958310, loc_conf = 0x1b9590e8,
read_event_handler = 0x445737 <ngx_http_block_reading>, write_event_handler = 0x437a34 <ngx_http_core_run_phases>, cache = 0x0, upstream = 0x0, upstream_states = 0x0, pool = 0x1b999b60,
header_in = 0x1ba0dba0, headers_in = {headers = {last = 0x1b99fb10, part = {elts = 0x1b99a190, nelts = 2, next = 0x0}, size = 48, nalloc = 20, pool = 0x1b999b60}, host = 0x1b99a190,
connection = 0x0, if_modified_since = 0x0, if_unmodified_since = 0x0, user_agent = 0x0, referer = 0x0, content_length = 0x0, content_type = 0x0, range = 0x0, if_range = 0x0,
transfer_encoding = 0x0, expect = 0x0, authorization = 0x0, keep_alive = 0x0, user = {len = 0, data = 0x0}, passwd = {len = 0, data = 0x0}, cookies = {elts = 0x1b99a550, nelts = 0,
size = 8, nalloc = 2, pool = 0x1b999b60}, server = {len = 9, data = 0x1b9c7625 "seite.net"}, content_length_n = -1, keep_alive_n = -1, connection_type = 0, msie = 0, msie6 = 0,
opera = 0, gecko = 0, chrome = 0, safari = 0, konqueror = 0}, headers_out = {headers = {last = 0x1b99fc28, part = {elts = 0x1b999bb0, nelts = 0, next = 0x0}, size = 48, nalloc = 20,
pool = 0x1b999b60}, status = 0, status_line = {len = 0, data = 0x0}, server = 0x0, date = 0x0, content_length = 0x0, content_encoding = 0x0, location = 0x0, refresh = 0x0,
last_modified = 0x0, content_range = 0x0, accept_ranges = 0x0, www_authenticate = 0x0, expires = 0x0, etag = 0x0, override_charset = 0x0, content_type_len = 0, content_type = {len = 0,
data = 0x0}, charset = {len = 0, data = 0x0}, content_type_lowcase = 0x0, content_type_hash = 0, cache_control = {elts = 0x0, nelts = 0, size = 0, nalloc = 0, pool = 0x0},
content_length_n = -1, date_time = 0, last_modified_time = -1}, request_body = 0x0, lingering_time = 0, start_sec = 1344349062, start_msec = 773, method = 2, http_version = 1001,
request_line = {len = 14, data = 0x1b9c7610 "GET / HTTP/1.1\nHost"}, uri = {len = 1, data = 0x1b9c7614 "/ HTTP/1.1\nHost"}, args = {len = 0, data = 0x0}, exten = {len = 0, data = 0x0},
unparsed_uri = {len = 1, data = 0x1b9c7614 "/ HTTP/1.1\nHost"}, method_name = {len = 3, data = 0x1b9c7610 "GET / HTTP/1.1\nHost"}, http_protocol = {len = 8,
data = 0x1b9c7616 "HTTP/1.1\nHost"}, out = 0x0, main = 0x1b99faa0, parent = 0x0, postponed = 0x0, post_subrequest = 0x0, posted_requests = 0x0, virtual_names = 0x1b969258,
phase_handler = 4, content_handler = 0x472884 <ngx_http_fastcgi_handler>, access_code = 0, variables = 0x1b99a020, ncaptures = 0, captures = 0x0,
captures_data = 0x1b99a56d "195.162.24.220195.162.24.220\356(F\256ܱz:\365\311&\337bog\267I\265ۉ\324*:E\027\225Y\265)!MiL\262\177/\207\303\021\243]\260t\335శ\222\302\316)dmL\312*i\333ۏM3\317ah\350\313\\\024\204g\a\211\030\306H\370\f\360\f\321\351L\216\f", limit_rate = 65536, header_size = 0, request_length = 58, err_status = 0, http_connection = 0x1b9f0ec8,
log_handler = 0x446b6e <ngx_http_log_error_handler>, cleanup = 0x0, subrequests = 201, count = 1, blocked = 0, aio = 0, http_state = 2, complex_uri = 0, quoted_uri = 0, plus_in_uri = 0,
space_in_uri = 0, invalid_header = 0, add_uri_to_alias = 0, valid_location = 1, valid_unparsed_uri = 1, uri_changed = 0, uri_changes = 11, request_body_in_single_buf = 0,
request_body_in_file_only = 0, request_body_in_persistent_file = 0, request_body_in_clean_file = 0, request_body_file_group_access = 0, request_body_file_log_level = 5,
subrequest_in_memory = 0, waited = 0, cached = 0, proxy = 0, bypass_cache = 0, no_cache = 0, limit_conn_set = 0, limit_req_set = 0, pipeline = 0, plain_http = 0, chunked = 0,
header_only = 0, keepalive = 1, lingering_close = 0, discard_body = 0, internal = 0, error_page = 0, ignore_content_encoding = 0, filter_finalize = 0, post_action = 0,
request_complete = 0, request_output = 0, header_sent = 0, expect_tested = 0, root_tested = 0, done = 0, logged = 0, buffered = 0, main_filter_need_in_memory = 0,
filter_need_in_memory = 0, filter_need_temporary = 0, allow_ranges = 0, state = 0, header_hash = 103689151937377, lowcase_index = 9,
lowcase_header = "x-real-ip", '\000' <repeats 22 times>, header_name_start = 0x1b9c7649 "\net", header_name_end = 0x1b9c7638 "", header_start = 0x1b9c763a "195.162.24.220",
header_end = 0x1b9c7649 "\net", uri_start = 0x1b9c7614 "/ HTTP/1.1\nHost", uri_end = 0x1b9c7615 " HTTP/1.1\nHost", uri_ext = 0x0, args_start = 0x0,
request_start = 0x1b9c7610 "GET / HTTP/1.1\nHost", request_end = 0x1b9c761e "\nHost", method_end = 0x1b9c7612 "T / HTTP/1.1\nHost", schema_start = 0x0, schema_end = 0x0, host_start = 0x0,
host_end = 0x0, port_start = 0x0, port_end = 0x0, http_minor = 1, http_major = 1}