Project

General

Profile

Actions
Copy link

Bug #71

closed

Abort in Defrag4Reassmble on startup.

Added by Will Metcalf almost 15 years ago. Updated over 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
0.8.1
Affected Versions:
Effort:
Difficulty:
Label:

Description

I'm seeing this quite a bit at startup on networks that have frags. Maybe because the engine is coming in after the conversation has already started? If I extract traffic from a pcap for the matching ip addy's as seen in the bracktrace output and replay it I do not get the same abort.

suricata: defrag.c:788: Defrag4Reassemble: Assertion `!(rp->ip4h == ((void *)0))' failed.

Files

0001-Fix-issue-71.patch (21.7 KB) 0001-Fix-issue-71.patch Jason Ish, 02/01/2010 01:14 PM
Actions
Copy link
 #1

Updated by Jason Ish over 14 years ago

The insert and re-assemble steps need to be done in the scope of the same lock.

Actions
Copy link
 #2

Updated by Victor Julien over 14 years ago

  • Status changed from New to Closed

Applied, thanks Jason.

Actions
Copy link

Also available in: Atom PDF