Actions
Bug #2141
closed4.0.0-dev (rev 8ea9a5a) segfault
Affected Versions:
Effort:
Difficulty:
Label:
Description
Details can be found in the attached file.
Interesting observation - if I run Suricata the very same way (same compile options/config/traffic) but with mpm-algo hyperscan (as opposed to mpm-algo ac-ks that generated this core/segfault) - it segfaults and exits as well but I never get a core file (reproducible). The err with hs is :
[11104] 10/6/2017 -- 01:47:44 - (util-mpm-hs.c:942) <Error> (SCHSSearch) -- [ERRCODE: SC_ERR_FATAL(171)] - Hyperscan returned error -1
Files
Updated by Victor Julien over 7 years ago
- Status changed from New to Assigned
- Assignee set to Jason Ish
- Priority changed from Normal to High
- Target version set to 70
buf NULL buflen > 0, I think this is related to the new GAP logic.
#0 0x000000000067738e in SCACTileSearchSmall64 (ctx=0xc433d0, mpm_thread_ctx=0x7f0709f55d30, pmq=0x7f0709f55d20, buf=0x0, buflen=17) at util-mpm-ac-tile-small.c:46
#1 0x0000000000676730 in SCACTileSearch (mpm_ctx=0x9e4d08 <alpd_ctx+8>, mpm_thread_ctx=0x7f0709f55d30, pmq=0x7f0709f55d20, buf=0x0, buflen=17) at util-mpm-ac-tile.c:1246
#2 0x000000000041f278 in AppLayerProtoDetectPMGetProto (tctx=0x7f0709f55d20, f=0x2810990, buf=0x0, buflen=373, direction=20 '\024', ipproto=6 '\006', pm_results=0x7f072f7fbd70)
at app-layer-detect-proto.c:251
Jason can you have a look?
Updated by Victor Julien over 7 years ago
- Status changed from Assigned to Closed
- Priority changed from High to Normal
- Target version changed from 70 to 4.0rc1
Actions