Suricata

I'm running Suricata 4.1.4, and that's related to the problem.

It seems Suricata 4.1.4 won't initialize NSS in the testing mode, but 4.1.4 will.

Here is the root cause:

In 4.1.3, Suricata exits directly in the test mode:

if (suricata.run_mode  RUNMODE_CONF_TEST){
          SCLogNotice("Configuration provided was successfully loaded. Exiting.");
  #ifdef HAVE_MAGIC
          MagicDeinit();
  #endif
          exit(EXIT_SUCCESS);
      }

In 4.1.4, the code is changed to support the engine analysis mode. Suricata doesn't exit directly, and instead it tries to clean up and that calls NSS_Shutdown() and triggers the crash.

if (suricata.run_mode  RUNMODE_ENGINE_ANALYSIS) {
          goto out; 
      } else if (suricata.run_mode == RUNMODE_CONF_TEST){
          SCLogNotice("Configuration provided was successfully loaded. Exiting.");
          goto out; 
      }

Yujie Zhao wrote:

I'm running Suricata 4.1.4, and that's related to the problem.

It seems Suricata 4.1.4 won't initialize NSS in the testing mode, but 4.1.3 will.