Hi Brian,

Thanks for your fast answer and apologies for my delay

Unfortunately, i reproduced a similar crash on trusty-backports version
Not exactly the same though:


ii  apache2                                                   2.4.10-1ubuntu1.1~ubuntu14.04.2   amd64                             Apache HTTP Server
un  apache2-api-20120211                                      <none>                            <none>                            (no description available)
ii  apache2-bin                                               2.4.10-1ubuntu1.1~ubuntu14.04.2   amd64                             Apache HTTP Server (binary files and modules)
ii  apache2-data                                              2.4.10-1ubuntu1.1~ubuntu14.04.2   all                               Apache HTTP Server (common files)
ii  apache2-dbg                                               2.4.10-1ubuntu1.1~ubuntu14.04.2   amd64                             Apache debugging symbols
un  apache2-doc                                               <none>                            <none>                            (no description available)
ii  apache2-mpm-event                                         2.4.10-1ubuntu1.1~ubuntu14.04.2   amd64                             transitional event MPM package for apache2


(gdb) bt
#0  0x00007feee4331861 in notify_suspend (cs=0x7feee01612a8) at event.c:891
#1  process_socket (my_thread_num=23, my_child_num=<optimized out>, cs=0x7feee01612a8, sock=<optimized out>, p=<optimized out>, thd=<optimized out>) at event.c:1124
#2  worker_thread (thd=<optimized out>, dummy=<optimized out>) at event.c:1875
#3  0x00007feee71eb184 in start_thread (arg=0x7feed2fed700) at pthread_create.c:312
#4  0x00007feee6f17ffd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

(gdb) bt full
#0  0x00007feee4331861 in notify_suspend (cs=0x7feee01612a8) at event.c:891
No locals.
#1  process_socket (my_thread_num=23, my_child_num=<optimized out>, cs=0x7feee01612a8, sock=<optimized out>, p=<optimized out>, thd=<optimized out>) at event.c:1124
        c = <optimized out>
        sbh = 0x7feee0161928
        conn_id = <optimized out>
        rc = <optimized out>
#2  worker_thread (thd=<optimized out>, dummy=<optimized out>) at event.c:1875
        ti = <optimized out>
        process_slot = <optimized out>
        thread_slot = 23
        csd = 0x7feee01610a0
        cs = 0x7feee01612a8
        ptrans = 0x7feee0161028
        rv = <optimized out>
        is_idle = 0
        te = 0x0
#3  0x00007feee71eb184 in start_thread (arg=0x7feed2fed700) at pthread_create.c:312
        __res = <optimized out>
        pd = 0x7feed2fed700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140663718860544, 4768455907926276535, 0, 0, 140663718861248, 140663718860544, -4759934683652884041, -4759958051315451465}, mask_was_saved = 0}}, priv = {
            pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#4  0x00007feee6f17ffd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111



(gdb) p cs
$2 = (event_conn_state_t *) 0x7feee01612a8

(gdb) p *cs
Cannot access memory at address 0x7feee01612a8


I can reproduce it quite easily with fastcgi + our product behind so i can do other tests if needed