<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">It doesn’t seem to want to segfault with -O0 but I’m gonna keep an eye on it. Might be a compiler bug. With -O2 (or whatever the default is) I got some more data from the core dump but the stuff I think we want got optimized out. Might try a different GCC as well and see if it makes a difference.<div class=""><br class=""></div><div class="">Thanks</div><div class="">Nick</div><div class=""><br class=""><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Dec 16, 2017, at 3:31 AM, Peter Manev <<a href="mailto:petermanev@gmail.com" class="">petermanev@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="content-type" content="text/html; charset=utf-8" class=""><div dir="auto" class=""><br class=""><div class=""><br class="">On 15 Dec 2017, at 21:49, Nick Price <<a href="mailto:nick@spun.io" class="">nick@spun.io</a>> wrote:<br class=""><br class=""></div><blockquote type="cite" class=""><div class=""><span class="">Gotten a couple of segfaults today that seem to point to the</span><br class=""><span class="">parse_rpc_packet_header nom macro in the Rust extensions. Haven't been</span><br class=""><span class="">able to get a core dump yet or packet capture, but I'm working on it.</span><br class=""><span class=""></span><br class=""><span class="">Anyone else seen anything like this? For now I've just disabled nfs in</span><br class=""><span class="">my config and everything has been stable.</span><br class=""></div></blockquote><div class=""><br class=""></div><div class="">It would be very helpful if you could recompile with debugging enabled ( <a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Reporting_Bugs" class="">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Reporting_Bugs</a> ) and post a report (once you have a core) after it segfaults again on our redmine tracker.</div><div class=""><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><span class=""></span><br class=""><span class="">[ 3190.831668] W#19[51202]: segfault at 0 ip 000000000061ec49 sp</span><br class=""><span class="">00007f4814ff7f10 error 4 in suricata[400000+345000] </span><br class=""><span class="">[ 6252.420770] W#58[53247]: segfault at 0 ip 000000000061ec49 sp</span><br class=""><span class="">00007f05e3ffde00 error 4 in suricata[400000+345000]</span><br class=""><span class=""></span><br class=""><span class="">root@lpa880:~# addr2line -e /usr/bin/suricata</span><br class=""><span class="">000000000061ec49 </span><br class=""><span class=""></span><br class=""><span class="">/root/suricata-4.0.3/rust/src/nfs/<a href="http://rpc_records.rs:67/" class="">rpc_records.rs:67</a></span><br class=""><span class=""></span><br class=""><span class="">Nick</span><br class=""><span class="">_______________________________________________</span><br class=""><span class="">Suricata IDS Devel mailing list: <a href="mailto:oisf-devel@openinfosecfoundation.org" class="">oisf-devel@openinfosecfoundation.org</a></span><br class=""><span class="">Site: <a href="http://suricata-ids.org/" class="">http://suricata-ids.org</a> | Participate: <a href="http://suricata-ids.org/participate/" class="">http://suricata-ids.org/participate/</a></span><br class=""><span class="">List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel" class="">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel</a></span><br class=""><span class="">Redmine: <a href="https://redmine.openinfosecfoundation.org/" class="">https://redmine.openinfosecfoundation.org/</a></span><br class=""><span class=""></span><br class=""></div></blockquote></div></div></blockquote></div><br class=""></div></div></body></html>