Bug #2187: hyperscan: mpm setup error leads to crash - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #2187

closed

hyperscan: mpm setup error leads to crash

Added by Victor Julien over 7 years ago. Updated over 7 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

4.0.0

Affected Versions:

Effort:

Difficulty:

Label:

Description

[12548] 19/7/2017 -- 10:12:18 - (util-mpm-hs.c:684) <Error> (SCHSPreparePatterns) -- [ERRCODE: SC_ERR_FATAL(171)] - failed to compile hyperscan database
[12548] 19/7/2017 -- 10:12:18 - (util-mpm-hs.c:686) <Error> (SCHSPreparePatterns) -- [ERRCODE: SC_ERR_FATAL(171)] - compile error: Expression has max_offset=21 but requires 22 bytes to match.

Thread 4 "W#03-eth3" received signal SIGSEGV, Segmentation fault.

(gdb) f 0
#0  0x000000000096eee9 in SCHSSearch (mpm_ctx=0x604002235a50, mpm_thread_ctx=0x617000198110, pmq=0x617000198140, 
    buf=0x7fffe992a084 "<removed>"..., buflen=320) at util-mpm-hs.c:933
933         BUG_ON(pd->hs_db == NULL);
(gdb) print *pd
Cannot access memory at address 0x0