Project

General

Profile

Actions

Bug #3726

closed

Segmentation fault on rule reload when using libmagic

Added by Angelo Mirabella almost 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
medium
Difficulty:
medium
Label:
Needs backport to 4.1, Needs backport to 5.0

Description

If libmagic is enabled and there are signature using libmagic, rule reloading causes a segmentation fault on the next file matching the rule.
This is due to an improper reinitialization of the thread contexts.
In attachment there are a sample stack trace and a sample rule file.


Files

stack_trace (52.8 KB) stack_trace Angelo Mirabella, 05/26/2020 04:48 PM
test.rules (1.18 KB) test.rules Angelo Mirabella, 05/26/2020 04:50 PM
suricata_testcase.zip (178 KB) suricata_testcase.zip Angelo Mirabella, 05/28/2020 10:54 PM
build-info.txt (3.82 KB) build-info.txt Angelo Mirabella, 05/28/2020 10:55 PM

Related issues 2 (0 open2 closed)

Copied to Suricata - Bug #4133: Segmentation fault on rule reload when using libmagicClosedJeff LucovskyActions
Copied to Suricata - Bug #4134: Segmentation fault on rule reload when using libmagicRejectedShivani BhardwajActions
Actions

Also available in: Atom PDF