Actions
Bug #1004
closedsegfault in libc-2.15.so several times a day
Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:
Description
Oct 22 10:48:43 kernel: [ 3711.941401] Detect22916: segfault at 2d ip 00007f5a6ef230b5 sp 00007f5a667fc408 error 4 in libc-2.15.so[7f5a6ede3000+1b5000]
This is Suricata version 1.4.6 RELEASE Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 PF_RING AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_HTP_TX_GET_RESPONSE_HEADERS_RAW 64-bits, Little-endian architecture GCC version 4.6.3, C version 199901 __GCC_HAVE_SYNC_COMPARE_AND_SWAP_1 __GCC_HAVE_SYNC_COMPARE_AND_SWAP_2 __GCC_HAVE_SYNC_COMPARE_AND_SWAP_4 __GCC_HAVE_SYNC_COMPARE_AND_SWAP_8 __GCC_HAVE_SYNC_COMPARE_AND_SWAP_16 compiled with -fstack-protector compiled with _FORTIFY_SOURCE=2 compiled with libhtp 0.2.14, linked against 0.2.14 Suricata Configuration: AF_PACKET support: yes PF_RING support: yes NFQueue support: no IPFW support: no DAG enabled: no Napatech enabled: no Unix socket enabled: no libnss support: no libnspr support: no libjansson support: no Prelude support: yes PCRE jit: no libluajit: no libgeoip: no Non-bundled htp: no Old barnyard2 support: no CUDA enabled: no Suricatasc install: yes Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Profiling enabled: no Profiling locks enabled: no Generic build parameters: Installation prefix (--prefix): /usr/local Configuration directory (--sysconfdir): /usr/local/etc/suricata/ Log directory (--localstatedir) : /usr/local/var/log/suricata/ Host: x86_64-unknown-linux-gnu GCC binary: gcc GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: no
GDB Output:
Thread 12 (LWP 2372): #0 0x00007f063d7596b1 in ?? () #1 0x0000000001b6feb2 in ?? () #2 0x00007f0630cd97a0 in ?? () #3 0x00007f0630c72930 in ?? () #4 0x0000000000000004 in ?? () #5 0x0000000000000014 in ?? () #6 0x0000000000000000 in ?? () Thread 11 (LWP 2378): #0 0x00007f063deff0fe in ?? () #1 0x0000000000000000 in ?? () Thread 10 (LWP 2377): #0 0x000000000051554f in DetectIPProtoParse () Cannot access memory at address 0x5a8
Updated by Anoop Saldanha about 11 years ago
Can you reproduce this on every run?
If yes, can you supply the rule/rule_file on which you can reproduce this segfault and also the config?
Actions