Actions
Bug #1729
closedPCRE jit is disabled/blacklisted when it should not
Affected Versions:
Effort:
Difficulty:
Label:
Description
If Suri is compiled towards a custom PCRE 8.38 "/opt/pcre" location on Debian Jessie .. during the configure stage - it still disables/blacklists PCRE jit since it finds that the one in the OS is 8.35 ...but it should not complain since it is pointed to a diff location where the pcre version is diff/better than 8.35.
Configure line -
./autogen.sh && ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-pie --enable-geoip --enable-lua --with-libpcre-includes=/opt/pcre/include/ --with-libpcre-libraries=/opt/pcre/lib/ --with-libjansson-includes=/usr/local/include/ --with-libjansson-libraries=/usr/local/lib/ --with-libnss-libraries=/usr/lib64 --with-libnss-includes=/usr/include/nss3 --with-libnspr-libraries=/usr/lib64 --with-libnspr-includes=/usr/include/nspr4
where pcre is compiled and installed in /opt/pcre - with the following config line -
./configure --prefix=/opt/pcre/ --enable-unicode-properties --enable-jit --enable-utf8 --enable-pcre16 --enable-pcre32--enable-pcregrep-libz --disable-static && make clean && make -j && make install
/home/pevma/Work/Suricata/suricomp/oisf# ldd /usr/bin/suricata
linux-vdso.so.1 (0x00007ffd8e339000)
liblua5.1.so.0 => /usr/lib/x86_64-linux-gnu/liblua5.1.so.0 (0x00007fa8bbea9000)
libhtp-0.5.18.so.1 => /usr/lib/x86_64-linux-gnu/libhtp-0.5.18.so.1 (0x00007fa8bbc8a000)
libGeoIP.so.1 => /usr/lib/x86_64-linux-gnu/libGeoIP.so.1 (0x00007fa8bba5a000)
libmagic.so.1 => /usr/lib/x86_64-linux-gnu/libmagic.so.1 (0x00007fa8bb83a000)
libcap-ng.so.0 => /usr/lib/x86_64-linux-gnu/libcap-ng.so.0 (0x00007fa8bb634000)
libpcap.so.0.8 => /usr/lib/x86_64-linux-gnu/libpcap.so.0.8 (0x00007fa8bb3f4000)
libnet.so.1 => /usr/lib/x86_64-linux-gnu/libnet.so.1 (0x00007fa8bb1da000)
libjansson.so.4 => /usr/lib/x86_64-linux-gnu/libjansson.so.4 (0x00007fa8bafcc000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fa8badaf000)
libyaml-0.so.2 => /usr/lib/x86_64-linux-gnu/libyaml-0.so.2 (0x00007fa8bab90000)
libpcre.so.1 => /opt/pcre/lib/libpcre.so.1 (0x00007fa8ba922000)
libnss3.so => /usr/lib/x86_64-linux-gnu/libnss3.so (0x00007fa8ba5da000)
libnssutil3.so => /usr/lib/x86_64-linux-gnu/libnssutil3.so (0x00007fa8ba3ae000)
libsmime3.so => /usr/lib/x86_64-linux-gnu/libsmime3.so (0x00007fa8ba181000)
libssl3.so => /usr/lib/x86_64-linux-gnu/libssl3.so (0x00007fa8b9f34000)
libplds4.so => /usr/lib/x86_64-linux-gnu/libplds4.so (0x00007fa8b9d30000)
libplc4.so => /usr/lib/x86_64-linux-gnu/libplc4.so (0x00007fa8b9b2b000)
libnspr4.so => /usr/lib/x86_64-linux-gnu/libnspr4.so (0x00007fa8b98eb000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fa8b9540000)
/lib64/ld-linux-x86-64.so.2 (0x00007fa8bc553000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fa8b923f000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fa8b903b000)
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007fa8b8e20000)
librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007fa8b8c18000)
/home/pevma/Work/Suricata/suricomp/oisf#
root@DONPEDRO:/home/pevma/Work/Suricata/suricomp/oisf# /usr/bin/suricata --build-info
This is Suricata version 3.0dev (rev 53704ea)
Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LUA HAVE_LIBJANSSON TLS
SIMD support: SSE_4_2 SSE_4_1 SSE_3
Atomic intrisics: 1 2 4 8 16 byte(s)
64-bits, Little-endian architecture
GCC version 4.9.2, C version 199901
compiled with _FORTIFY_SOURCE=0
L1 cache line size (CLS)=64
thread local storage method: __thread
compiled with LibHTP v0.5.18, linked against LibHTP v0.5.18
Suricata Configuration:
AF_PACKET support: yes
PF_RING support: no
NFQueue support: no
NFLOG support: no
IPFW support: no
Netmap support: no
DAG enabled: no
Napatech enabled: no
Unix socket enabled: yes
Detection enabled: yes
libnss support: yes
libnspr support: yes
libjansson support: yes
hiredis support: no
Prelude support: no
PCRE jit: no, libpcre 8.35 blacklisted
LUA support: yes
libluajit: no
libgeoip: yes
Non-bundled htp: no
Old barnyard2 support: no
CUDA enabled: no
Suricatasc install: yes
Unit tests enabled: no
Debug output enabled: no
Debug validation enabled: no
Profiling enabled: no
Profiling locks enabled: no
Coccinelle / spatch: no
Generic build parameters:
Installation prefix: /usr
Configuration directory: /etc/suricata/
Log directory: /var/log/suricata/
--prefix /usr
--sysconfdir /etc
--localstatedir /var
Host: x86_64-unknown-linux-gnu
Compiler: gcc (exec name) / gcc (real)
GCC Protect enabled: no
GCC march native enabled: yes
GCC Profile enabled: no
Position Independent Executable enabled: yes
CFLAGS -g -O2 -march=native
PCAP_CFLAGS -I/usr/include
SECCFLAGS
/home/pevma/Work/Suricata/suricomp/oisf#
Updated by Peter Manev over 9 years ago
- Subject changed from PCRE jit disabled/blacklisted when it should not to PCRE jit is disabled/blacklisted when it should not
Updated by Andreas Herz over 9 years ago
- Status changed from New to Closed
- Target version set to 3.0.1RC1
This is "fixed" with this commit: https://github.com/inliniac/suricata/commit/c8399e8c51916d307dd7815999672617f2e4d7be
We just bypass it.
Actions