Project

General

Profile

Actions

Bug #486

closed

segfault with suricata rev. bd3a655, 1.3beta2

Added by Stefan Sabolowitsch over 9 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Hi all,
i get a segfault with suricata rev. bd3a655 (Add pcap workers mode), 1.3beta2 (Centos 6.x, 64bit).
But i use not a Napatech or Myricom.

thanks for bugfixing
Stefan

configure option:

 ./configure --enable-pcre-jitgd

kernel logfile:

Jun 19 10:48:35 ipd1 kernel: RxPcapbr031[27407]: segfault at 21 ip 0000000000000021 sp 00007fe466bfbce8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr047[27423]: segfault at 21 ip 0000000000000021 sp 00007fe45c144ce8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr010[27386]: segfault at 21 ip 0000000000000021 sp 00007fe4ba29cce8 error 14 in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: RxPcapbr023[27399]: segfault at 21 ip 0000000000000021 sp 00007fe4a8df8ce8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr026[27402]: segfault at 21 ip 0000000000000021 sp 00007fe48a1face8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr046[27422]: segfault at 21 ip 0000000000000021 sp 00007fe45cb45ce8 error 14 in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: RxPcapbr011[27387]: segfault at 21 ip 0000000000000021 sp 00007fe4b989bce8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr032[27408]: segfault at 21 ip 0000000000000021 sp 00007fe4661face8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr042[27418]: segfault at 21 ip 0000000000000021 sp 00007fe45fdf0ce8 error 14
Jun 19 10:48:35 ipd1 kernel: RxPcapbr030[27406]: segfault at 21 ip 0000000000000021 sp 00007fe4675fcce8 error 14 in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:35 ipd1 kernel: in suricata[400000+177000]
Jun 19 10:48:42 ipd1 kernel: __ratelimit: 6 callbacks suppressed
Jun 19 10:48:42 ipd1 kernel: RxPcapbr17[27439]: segfault at 21 ip 0000000000000021 sp 00007fb2bbffdce8 error 14 in suricata[400000+177000]
Jun 19 10:48:42 ipd1 kernel: RxPcapbr18[27440]: segfault at 21 ip 0000000000000021 sp 00007fb2bb5fcce8 error 14 in suricata[400000+177000]
Jun 19 10:56:23 ipd1 kernel: device br0 left promiscuous mode
Jun 19 10:56:23 ipd1 kernel: device br1 left promiscuous mode

gdb output:

[3837] 16/6/2012 -- 18:29:15 - (source-pcap.c:358) <Info> (ReceivePcapThreadInit) -- Running in 'aut                                     o' checksum mode. Detection of interface state will require 1000 packets.
[New Thread 0x7fffee7be700 (LWP 3838)]
[3838] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffeddbd700 (LWP 3839)]
[3839] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffe75fe700 (LWP 3840)]
[3840] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[Thread 0x7fffeddbd700 (LWP 3839) exited]
[New Thread 0x7fffe6bfd700 (LWP 3841)]
[Thread 0x7fffee7be700 (LWP 3838) exited]
[Thread 0x7fffe75fe700 (LWP 3840) exited]
[3841] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffe61fc700 (LWP 3842)]
[Thread 0x7fffe6bfd700 (LWP 3841) exited]
[3842] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffe57fb700 (LWP 3844)]
[3844] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[Thread 0x7fffe61fc700 (LWP 3842) exited]
[New Thread 0x7fffe4dfa700 (LWP 3845)]
[Thread 0x7fffe57fb700 (LWP 3844) exited]
[3845] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[Thread 0x7fffe4dfa700 (LWP 3845) exited]
[New Thread 0x7fffc3fff700 (LWP 3846)]
[3846] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffc35fe700 (LWP 3847)]
[3847] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[Thread 0x7fffc3fff700 (LWP 3846) exited]
[New Thread 0x7fffc2bfd700 (LWP 3848)]
[Thread 0x7fffc35fe700 (LWP 3847) exited]
[3848] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffc21fc700 (LWP 3849)]
[3849] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[New Thread 0x7fffc17fb700 (LWP 3850)]
[New Thread 0x7fffc0dfa700 (LWP 3851)]
[3851] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[3850] 16/6/2012 -- 18:29:15 - (source-pcap.c:348) <Error> (ReceivePcapThreadInit) -- [ERRCODE: SC_E                                     RR_INVALID_VALUE(129)] - Unable to find Live device
[Thread 0x7fffc21fc700 (LWP 3849) exited]
[Thread 0x7fffc2bfd700 (LWP 3848) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffef1bf700 (LWP 3837)]
0x0000000000000021 in ?? ()
Missing separate debuginfos, use: debuginfo-install file-libs-5.04-11.el6.x86_64 glibc-2.12-1.47.el6                                     _2.12.x86_64 libcap-ng-0.6.4-3.el6_0.1.x86_64 libgcc-4.4.6-3.el6.x86_64 libnet-1.1.5-1.el6.x86_64 li                                     bpcap-1.0.0-6.20091201git117cb5.el6.x86_64 zlib-1.2.3-27.el6.x86_64
(gdb)

Actions #1

Updated by Peter Manev over 9 years ago

So Stefan, just to clarify -
after this rev was introduced (rev. bd3a655) you started getting problems on you CentOS 64 bit box - correct?

Actions #2

Updated by Stefan Sabolowitsch over 9 years ago

Peter Manev wrote:

So Stefan, just to clarify -
after this rev was introduced (rev. bd3a655) you started getting problems on you CentOS 64 bit box - correct?

Peter, yes this is correct.

Actions #3

Updated by Victor Julien over 9 years ago

  • Status changed from New to Assigned
  • Assignee set to Victor Julien
  • Priority changed from High to Normal
  • Target version changed from 1.3beta2 to 1.3rc1

Can you retry against the current git master?

Actions #4

Updated by Stefan Sabolowitsch over 9 years ago

perfect Victor, it's work now.
Thank you for your fast bugfixing.
You can close this ticket.

Actions #5

Updated by Victor Julien over 9 years ago

  • Status changed from Assigned to Closed

Great, thanks for testing!

Actions

Also available in: Atom PDF