Hello Igor,

Thank you for your quick response. I've installed gdb and enabled global setuid core and reproduced the scenario for 0.6.29. Here's the backtrace:

[moji@d9b60282 /opt/local/src]$ sudo gdb /opt/local/nginx/sbin/nginx / var/core/core.nginx.12427 GNU gdb 6.6 Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-pc-solaris2.10"... Reading symbols from /lib/libsocket.so.1...done. Loaded symbols for /lib/libsocket.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/librt.so.1... warning: Lowest section in /lib/librt.so.1 is .dynamic at 00000074 done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libsendfile.so.1...done. Loaded symbols for /lib/libsendfile.so.1 Reading symbols from /opt/local/lib/libpcre.so.0...done. Loaded symbols for /usr/local/lib/libpcre.so.0 Reading symbols from /opt/local/lib/libz.so.1...done. Loaded symbols for /usr/local/lib/libz.so.1 Reading symbols from /lib/libc.so.1...done. Loaded symbols for /lib/libc.so.1 Reading symbols from /usr/sfw/lib/libgcc_s.so.1...done. Loaded symbols for /usr/sfw/lib/libgcc_s.so.1 Reading symbols from /lib/ld.so.1...done. Loaded symbols for /lib/ld.so.1 Core was generated by `/opt/local/nginx/sbin/nginx'. Program terminated with signal 11, Segmentation fault. #0 ngx_writev_chain (c=0x810e830, in=0x80d7d74, limit=2147479551) at src/os/unix/ngx_writev_chain.c:92 92 iov->iov_len += size; (gdb) where #0 ngx_writev_chain (c=0x810e830, in=0x80d7d74, limit=2147479551) at src/os/unix/ngx_writev_chain.c:92