[Oisf-devel] Suricata 1.2.1 + OpenBSD 5.1 = segmentation fault

Henri Wahl h.wahl at ifw-dresden.de
Mon May 7 07:24:00 UTC 2012


Hi,
here finally comes a segfault:

(gdb) bt full
#0  0x0a3b6dfd in match () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
#1  0x0a3b73b4 in match () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
#2  0x0a3bee6b in match () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
#3  0x0a3b73b4 in match () from /usr/local/lib/libpcre.so.2.5

... some pages like this...

No symbol table info available.
#267 0x0a3b9288 in match () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
#268 0x0a3bda8d in match () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
#269 0x0a3bda8d in match () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#270 0x0a3caa98 in pcre_exec () from /usr/local/lib/libpcre.so.2.5
No symbol table info available.
#271 0x1c0a2a7b in DetectPcrePayloadMatch (det_ctx=0x8a072000,
s=0x8664e400, sm=0x8bdd2df0, p=0x0, f=0x9cdac800,
    payload=0x80646048 "Id_+\"&moduleName=gadget&gadgetState=\"+c;var
a=new
Array();a.push(sciverseObj.smapiVars.gsUrl);a.push(\"/rest/gadgetstate/gadget/gs/\");a.push(this.sciverseId_);a.push(\"?clientToken=\");a.push(sciverseObj"...,
payload_len=2920) at detect-pcre.c:482
        _sc_enter_msg = '\0' <repeats 100 times>,
"�\001�^\000\000\000\000\000\000\000\000�\001�^\200��\206�\005\000\000\004\211\214\207(u2\215\030w\033\034\200��\206\000k\034\205\004\211\214\207���\213���\213",
'\0' <repeats 28 times>,
"\030m2\215���\213\000\211\214\207\000k\034\205\200��\206", '\0'
<repeats 16 times>, "\030m2\215", '\0' <repeats 1728 times>,
"�\000\000\000\r\000\000\000z�$\207\016\000\000\000\r\000\000\000�\000\000\000�\000\000\000\002w\b/\000\000\000\000@�$\207\211l2\215\000\000\000\000\000\000\000\000;�\a\034\211l2\215\000\000\000\000�\a\000\000�\000\000\000\200��~\000\230\003\212"...
        _sc_enter_temp = 0x8d326438 ""
        ret = Variable "ret" is not available.
(gdb)

Does this help?

Regards

-- 
Henri Wahl

IT Department
Leibniz-Institut für Festkörper- u.
Werkstoffforschung Dresden

tel. (03 51) 46 59 - 797
email: h.wahl at ifw-dresden.de
http://www.ifw-dresden.de

Nagios status monitor for your desktop:
http://nagstamon.ifw-dresden.de

IFW Dresden e.V., Helmholtzstraße 20, D-01069 Dresden
VR Dresden Nr. 1369
Vorstand: Prof. Dr. Ludwig Schultz, Dr. h.c. Dipl.-Finw. Rolf Pfrengle

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4719 bytes
Desc: S/MIME Kryptografische Unterschrift
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20120507/c9c795c0/attachment.bin>


More information about the Oisf-devel mailing list