Project

General

Profile

Actions

Bug #736

closed

new segfault (decode-teredo.c:55) on last Suricata v1.4 git

Added by rmkml rmkml about 11 years ago. Updated about 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Hi,
During my test, I have a new segfault on last yesterday git, please look gdb bt full:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff5e0d700 (LWP 23221)]
DecodeTeredo (tv=tv at entry=0x1e0434a0, dtv=dtv at entry=0x7fffe8010eb0,
     p=p at entry=0x137c5f0, pkt=pkt at entry=0x7fffe8015ada "", len=len at entry=8202,
     pq=pq at entry=0x1a4ee9b0) at decode-teredo.c:55
55          while (start[0] == 0x0) {
(gdb) bt full
#0  DecodeTeredo (tv=tv at entry=0x1e0434a0, dtv=dtv at entry=0x7fffe8010eb0,
     p=p at entry=0x137c5f0, pkt=pkt at entry=0x7fffe8015ada "", len=len at entry=8202,
     pq=pq at entry=0x1a4ee9b0) at decode-teredo.c:55
         start = 0x7fffe8026002 "" 
#1  0x0000000000443a22 in DecodeUDP (tv=0x1e0434a0, dtv=0x7fffe8010eb0,
     p=0x137c5f0,
     pkt=0x7fffe8015ad2 "\200\062\033X \022\240", <incomplete sequence \353>,
     len=8210, pq=0x1a4ee9b0) at decode-udp.c:85
No locals.
#2  0x0000000000441722 in DecodeIPV4 (tv=0x1e0434a0, dtv=0x7fffe8010eb0,
     p=<optimized out>, pkt=0x137c006 "E", len=<optimized out>, pq=0x1a4ee9b0)
     at decode-ipv4.c:534
         rp = 0x137c5f0
#3  0x00000000004e72e6 in DecodePcapFile (tv=0x1e0434a0, p=0x137b540,
     data=0x7fffe8010eb0, pq=0x1a4ee9b0, postpq=<optimized out>)
     at source-pcap-file.c:347
         dtv = 0x7fffe8010eb0
         curr_ts = <optimized out>
#4  0x00000000004fac9d in TmThreadsSlotVarRun (tv=0x1e0434a0, p=0x137b540,
     slot=0x137c5f0, slot at entry=0x1a4ee970) at tm-threads.c:542
         SlotFunc = 0xfffffffffffefb0f
         s = 0x1a4ee970
#5  0x00000000004e81de in TmThreadsSlotProcessPkt (p=0x137b540, s=0x1a4ee970,
     tv=0x1e0434a0) at tm-threads.h:139
         r = TM_ECODE_OK
#6  PcapFileCallbackLoop (user=0x7fffe80008f0 "\f", h=<optimized out>,
     pkt=0x7fffe8000ea0 "") at source-pcap-file.c:142
         ptv = 0x7fffe80008f0
         p = 0x137b540
#7  0x0000003f0521dd90 in pcap_offline_read () from /lib64/libpcap.so.1
No symbol table info available.
#8  0x00000000004e7e3e in ReceivePcapFileLoop (tv=0x1e0434a0, data=0x7fffe80008f0,
     slot=<optimized out>) at source-pcap-file.c:180
         packet_q_len = <optimized out>
         ptv = 0x7fffe80008f0
         r = <optimized out>
         s = <optimized out>
         __FUNCTION__ = "ReceivePcapFileLoop" 
#9  0x00000000004fda24 in TmThreadsSlotPktAcqLoop (td=0x1e0434a0)
     at tm-threads.c:682
         tv = 0x1e0434a0
         s = 0xedddc80
         r = <optimized out>
         slot = 0x0
         __FUNCTION__ = "TmThreadsSlotPktAcqLoop" 
#10 0x0000003a04007d14 in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#11 0x0000003a038f168d in clone () from /lib64/libc.so.6
No symbol table info available.

Best Regards
Rmkml
http://twitter.com/rmkml

Actions #1

Updated by Victor Julien about 11 years ago

  • Description updated (diff)
  • Status changed from New to Assigned
  • Assignee set to Eric Leblond
  • Target version set to 1.4.1

The value of "p->pkt_src" is 6, which is PKT_SRC_DEFRAG.

Actions #2

Updated by Eric Leblond about 11 years ago

The following PR implements a fix: https://github.com/inliniac/suricata/pull/285

Actions #3

Updated by Eric Leblond about 11 years ago

  • % Done changed from 0 to 80
Actions #4

Updated by Victor Julien about 11 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 80 to 100
Actions

Also available in: Atom PDF