Project

General

Profile

Actions

Bug #1355

closed

Bus error when reading pcap-file on OpenBSD

Added by Philipp Buehler over 9 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

This is Suricata version 2.1dev (rev ff8dae3) with --enable-gccprotect on OpenBSD/amd64 5.5

No rules loaded. PCAP file attached.

/home/suricata/bin/suricata -r test-openbsd.pcap --runmode="single" 
...
[32080] 30/12/2014 -- 18:07:22 - (tm-threads.c:2067) <Notice> (TmThreadWaitOnThreadInit) -- all 1 packet processing threads, 4 management threads initialized, engine started.
[32080] 30/12/2014 -- 18:07:22 - (suricata.c:2370) <Notice> (main) -- Signal Received.  Stopping engine.
Bus error (core dumped)

#0  0x00000adc13ffa9cc in PacketPoolDestroy () at tmqh-packetpool.c:301
301                 Packet *next_p = p->next;
(gdb) bt full
#0  0x00000adc13ffa9cc in PacketPoolDestroy () at tmqh-packetpool.c:301
        next_p = (Packet *) 0x0
        p = (Packet *) 0x6d69742064656966
        my_pool = (PktPool *) 0xade1a380880
        __func__ = "PacketPoolDestroy" 
#1  0x00000adc13f5a948 in FlowForceReassembly () at flow-timeout.c:544
No locals.
#2  0x00000adc13ff5337 in main (argc=4, argv=0x7f7ffffc7a20) at suricata.c:2399
        suri = {run_mode = 2, pcap_dev = '\0' <repeats 127 times>, sig_file = 0x0, sig_file_exclusive = 0, pid_filename = 0x0,
  regex_arg = 0x0, keyword_info = 0x0, runmode_custom_mode = 0x7f7ffffc7b7b "single", user_name = 0x0, group_name = 0x0,
  do_setuid = 0 '\0', do_setgid = 0 '\0', userid = 0, groupid = 0, delayed_detect = 0, rule_reload = 0, disabled_detect = 0,
  daemon = 0, offline = 1, verbose = 0, checksum_validation = -1, start_time = {tv_sec = 1419959242, tv_usec = 67007},
  log_dir = 0xade147379c0 "/home/suricata/var/log/suricata/"}
        de_ctx = (DetectEngineCtx *) 0xade1ca18000
        engine_retval = 0
        global_de_ctx = (DetectEngineCtx *) 0x319fc0
        __FUNCTION__ = "main" 
        __func__ = "main" 


Files

test-openbsd.pcap (56.5 KB) test-openbsd.pcap Philipp Buehler, 12/30/2014 11:10 AM
Actions

Also available in: Atom PDF