https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022015-09-16T08:37:27ZOpen Information Security FoundationSuricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=54952015-09-16T08:37:27ZAlessandro Guidoag@alessandroguido.me
<ul></ul><p>Currently I'm testing a patch that assures `data` being !NULL</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=54962015-09-16T10:54:30ZAlessandro Guidoag@alessandroguido.me
<ul><li><strong>File</strong> <a href="/attachments/1116">0001-Segfault-fix.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1116/0001-Segfault-fix.patch">0001-Segfault-fix.patch</a> added</li></ul><p>The attached patch avoids the segfaults</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=54972015-09-17T03:55:10ZAlessandro Guidoag@alessandroguido.me
<ul><li><strong>File</strong> <a href="/attachments/1117">evil.pcap</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1117/evil.pcap">evil.pcap</a> added</li></ul><p>Evil packet</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=54982015-09-17T03:55:54ZAlessandro Guidoag@alessandroguido.me
<ul><li><strong>File</strong> <a href="/attachments/1118">evil.rules</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1118/evil.rules">evil.rules</a> added</li></ul><p>Evil rule</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=54992015-09-17T04:00:11ZAlessandro Guidoag@alessandroguido.me
<ul><li><strong>File</strong> <a href="/attachments/1119">evil.yaml</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/1119/evil.yaml">evil.yaml</a> added</li></ul><p>Evil config</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=55002015-09-19T01:50:50ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Assigned</i></li><li><strong>Assignee</strong> set to <i>Victor Julien</i></li><li><strong>Target version</strong> set to <i>2.0.9</i></li><li><strong>Private</strong> changed from <i>No</i> to <i>Yes</i></li></ul> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=55282015-09-25T10:18:45ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>Closed</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li><li><strong>Private</strong> changed from <i>Yes</i> to <i>No</i></li></ul><p>Fix applied and extended a bit, thanks Guido. We'll look into better supporting this detection logic later.</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=62522016-02-07T14:25:34ZAndreas Herzoisf@herzandreas.de
<ul></ul><p>The user "iro" in IRC said that the fix was applied in 2.x but not in 3.0, and i couldn't find it there either.</p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=62572016-02-08T02:10:37ZAlessandro Guidoag@alessandroguido.me
<ul></ul><p>Andreas Herz wrote:</p>
<blockquote>
<p>The user "iro" in IRC said that the fix was applied in 2.x but not in 3.0, and i couldn't find it there either.</p>
</blockquote>
<p>Yep, that would be me :)</p>
<p>Committed patch was: <a class="external" href="https://github.com/inliniac/suricata/commit/d7b0ec8c91600811b246f79b5ffbcb498aef2c7a">https://github.com/inliniac/suricata/commit/d7b0ec8c91600811b246f79b5ffbcb498aef2c7a</a></p> Suricata - Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438https://redmine.openinfosecfoundation.org/issues/1550?journal_id=62582016-02-08T07:42:22ZVictor Julienvictor@inliniac.net
<ul></ul><p>Tracking to for 3.x in <a class="issue tracker-1 status-5 priority-4 priority-default closed" title="Bug: Segmentation Fault at detect-engine-content-inspection.c:438 (master) (Closed)" href="https://redmine.openinfosecfoundation.org/issues/1698">#1698</a></p>