Actions
Bug #1729
closedPCRE jit is disabled/blacklisted when it should not
Affected Versions:
Effort:
Difficulty:
Label:
Description
If Suri is compiled towards a custom PCRE 8.38 "/opt/pcre" location on Debian Jessie .. during the configure stage - it still disables/blacklists PCRE jit since it finds that the one in the OS is 8.35 ...but it should not complain since it is pointed to a diff location where the pcre version is diff/better than 8.35.
Configure line -
./autogen.sh && ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-pie --enable-geoip --enable-lua --with-libpcre-includes=/opt/pcre/include/ --with-libpcre-libraries=/opt/pcre/lib/ --with-libjansson-includes=/usr/local/include/ --with-libjansson-libraries=/usr/local/lib/ --with-libnss-libraries=/usr/lib64 --with-libnss-includes=/usr/include/nss3 --with-libnspr-libraries=/usr/lib64 --with-libnspr-includes=/usr/include/nspr4
where pcre is compiled and installed in /opt/pcre - with the following config line -
./configure --prefix=/opt/pcre/ --enable-unicode-properties --enable-jit --enable-utf8 --enable-pcre16 --enable-pcre32--enable-pcregrep-libz --disable-static && make clean && make -j && make install
/home/pevma/Work/Suricata/suricomp/oisf# ldd /usr/bin/suricata linux-vdso.so.1 (0x00007ffd8e339000) liblua5.1.so.0 => /usr/lib/x86_64-linux-gnu/liblua5.1.so.0 (0x00007fa8bbea9000) libhtp-0.5.18.so.1 => /usr/lib/x86_64-linux-gnu/libhtp-0.5.18.so.1 (0x00007fa8bbc8a000) libGeoIP.so.1 => /usr/lib/x86_64-linux-gnu/libGeoIP.so.1 (0x00007fa8bba5a000) libmagic.so.1 => /usr/lib/x86_64-linux-gnu/libmagic.so.1 (0x00007fa8bb83a000) libcap-ng.so.0 => /usr/lib/x86_64-linux-gnu/libcap-ng.so.0 (0x00007fa8bb634000) libpcap.so.0.8 => /usr/lib/x86_64-linux-gnu/libpcap.so.0.8 (0x00007fa8bb3f4000) libnet.so.1 => /usr/lib/x86_64-linux-gnu/libnet.so.1 (0x00007fa8bb1da000) libjansson.so.4 => /usr/lib/x86_64-linux-gnu/libjansson.so.4 (0x00007fa8bafcc000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fa8badaf000) libyaml-0.so.2 => /usr/lib/x86_64-linux-gnu/libyaml-0.so.2 (0x00007fa8bab90000) libpcre.so.1 => /opt/pcre/lib/libpcre.so.1 (0x00007fa8ba922000) libnss3.so => /usr/lib/x86_64-linux-gnu/libnss3.so (0x00007fa8ba5da000) libnssutil3.so => /usr/lib/x86_64-linux-gnu/libnssutil3.so (0x00007fa8ba3ae000) libsmime3.so => /usr/lib/x86_64-linux-gnu/libsmime3.so (0x00007fa8ba181000) libssl3.so => /usr/lib/x86_64-linux-gnu/libssl3.so (0x00007fa8b9f34000) libplds4.so => /usr/lib/x86_64-linux-gnu/libplds4.so (0x00007fa8b9d30000) libplc4.so => /usr/lib/x86_64-linux-gnu/libplc4.so (0x00007fa8b9b2b000) libnspr4.so => /usr/lib/x86_64-linux-gnu/libnspr4.so (0x00007fa8b98eb000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fa8b9540000) /lib64/ld-linux-x86-64.so.2 (0x00007fa8bc553000) libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fa8b923f000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fa8b903b000) libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007fa8b8e20000) librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007fa8b8c18000) /home/pevma/Work/Suricata/suricomp/oisf# root@DONPEDRO:/home/pevma/Work/Suricata/suricomp/oisf# /usr/bin/suricata --build-info This is Suricata version 3.0dev (rev 53704ea) Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LUA HAVE_LIBJANSSON TLS SIMD support: SSE_4_2 SSE_4_1 SSE_3 Atomic intrisics: 1 2 4 8 16 byte(s) 64-bits, Little-endian architecture GCC version 4.9.2, C version 199901 compiled with _FORTIFY_SOURCE=0 L1 cache line size (CLS)=64 thread local storage method: __thread compiled with LibHTP v0.5.18, linked against LibHTP v0.5.18 Suricata Configuration: AF_PACKET support: yes PF_RING support: no NFQueue support: no NFLOG support: no IPFW support: no Netmap support: no DAG enabled: no Napatech enabled: no Unix socket enabled: yes Detection enabled: yes libnss support: yes libnspr support: yes libjansson support: yes hiredis support: no Prelude support: no PCRE jit: no, libpcre 8.35 blacklisted LUA support: yes libluajit: no libgeoip: yes Non-bundled htp: no Old barnyard2 support: no CUDA enabled: no Suricatasc install: yes Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Profiling enabled: no Profiling locks enabled: no Coccinelle / spatch: no Generic build parameters: Installation prefix: /usr Configuration directory: /etc/suricata/ Log directory: /var/log/suricata/ --prefix /usr --sysconfdir /etc --localstatedir /var Host: x86_64-unknown-linux-gnu Compiler: gcc (exec name) / gcc (real) GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: no Position Independent Executable enabled: yes CFLAGS -g -O2 -march=native PCAP_CFLAGS -I/usr/include SECCFLAGS /home/pevma/Work/Suricata/suricomp/oisf#
Updated by Peter Manev over 8 years ago
- Subject changed from PCRE jit disabled/blacklisted when it should not to PCRE jit is disabled/blacklisted when it should not
Updated by Andreas Herz over 8 years ago
- Status changed from New to Closed
- Target version set to 3.0.1RC1
This is "fixed" with this commit: https://github.com/inliniac/suricata/commit/c8399e8c51916d307dd7815999672617f2e4d7be
We just bypass it.
Actions