Project

General

Profile

Actions
Copy link

Bug #7822

open

engine-analysis: SEGV on rule failure without rules-fast-pattern enabled

Added by Shivani Bhardwaj 2 days ago. Updated 2 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
low
Label:

Description

AddressSanitizer:DEADLYSIGNAL
=================================================================
==1895348==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x79ae48086971 bp 0x7fff86b56a50 sp 0x7fff86b56a10 T0)
==1895348==The signal is caused by a READ memory access.
==1895348==Hint: address points to the zero page.
    #0 0x79ae48086971 in __GI__IO_fwrite libio/iofwrite.c:37
    #1 0x79ae4847ef18 in fwrite ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:1109
    #2 0x598ed0fda3e6 in EngineAnalysisRulesFailure /home/ard/Orgs/oisf/flowbit-ordering/src/detect-engine-analyzer.c:625
    #3 0x598ed0c050c6 in DetectLoadSigFile /home/ard/Orgs/oisf/flowbit-ordering/src/detect-engine-loader.c:211
    #4 0x598ed0c05822 in ProcessSigFiles /home/ard/Orgs/oisf/flowbit-ordering/src/detect-engine-loader.c:277
    #5 0x598ed0c06e96 in SigLoadSignatures /home/ard/Orgs/oisf/flowbit-ordering/src/detect-engine-loader.c:441
    #6 0x598ed0abeffe in LoadSignatures /home/ard/Orgs/oisf/flowbit-ordering/src/suricata.c:2500
    #7 0x598ed0abfe74 in PostConfLoadedDetectSetup /home/ard/Orgs/oisf/flowbit-ordering/src/suricata.c:2651
    #8 0x598ed0ac22c1 in SuricataInit /home/ard/Orgs/oisf/flowbit-ordering/src/suricata.c:3073
    #9 0x598ed0ab15f1 in main /home/ard/Orgs/oisf/flowbit-ordering/src/main.c:57
    #10 0x79ae4802a1c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
    #11 0x79ae4802a28a in __libc_start_main_impl ../csu/libc-start.c:360
    #12 0x598ed0ab1444 in _start (/home/ard/Orgs/oisf/flowbit-ordering/src/suricata+0x840444) (BuildId: 8dea6bc339819bb52fc5f33a95ca9a8bdc5f85ee)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV libio/iofwrite.c:37 in __GI__IO_fwrite
==1895348==ABORTING

if engine-analysis.rules-fast-pattern is not explicitly enabled.

Actions
Copy link

Also available in: Atom PDF