Bug #2276
Updated by Victor Julien almost 7 years ago
An empty value for coredump.max-dump in the config-file leads to a segfault because of a NULL-pointer dereference in CoredumpLoadConfig(). Here is a configuration example: coredump.max-dump: [] This will let suricata crash with a segfault. ASAN-output: <pre> ==9412==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f22e851aa28 bp 0x7ffd90006fc0 sp 0x7ffd90006740 T0) #0 0x7f22e851aa27 in strcasecmp (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x51a27) #1 0x5608a7ec0108 in CoredumpLoadConfig /root/suricata-1/src/util-coredump-config.c:52 #2 0x5608a7e8bb22 in PostConfLoadedSetup /root/suricata-1/src/suricata.c:2752 #3 0x5608a7e8c577 in main /root/suricata-1/src/suricata.c:2892 #4 0x7f22e4c622b0 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x202b0) #5 0x5608a7a30c59 in _start (/usr/local/bin/suricata+0xc4c59) </pre>