Nmap 5.05BETA1 doesn't work as root on Mac OS X

[Norbert Szetei <sine () trip sk>]

Hello,

I have compiled version of nmap from SVN (5.05BETA1) and the following  
bug:

$ ./nmap 127...1
Starting Nmap 5.05BETA1 ( http://nmap.org ) at 2009-09-13 16:22 CEST
Interesting ports on localhost (127.0.0.1):
Not shown: 999 closed ports
PORT    STATE SERVICE
631/tcp open  ipp

Nmap done: 1 IP address (1 host up) scanned in 6.95 seconds

# sudo ./nmap 127...1
Starting Nmap 5.05BETA1 ( http://nmap.org ) at 2009-09-13 16:22 CEST

When I try to use nmap as root, it freeze and also <enter> key for  
current results doesn't work (only ^C for abort).

I am attaching some informations about my OS:

Mac OS X Snow Leopard (version 10.6.1),

$ uname -a
Darwin arrakis.lan 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31  
22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386

$ gcc -v
Using built-in specs.
Target: i686-apple-darwin10
Configured with: /var/tmp/gcc/gcc-5646~6/src/configure --disable- 
checking --enable-werror --prefix=/usr --mandir=/share/man --enable- 
languages=c,objc,c++,obj-c++ --program-transform-name=/^[cg][^.-]*$/s/ 
$/-4.2/ --with-slibdir=/usr/lib --build=i686-apple-darwin10 --with-gxx- 
include-dir=/include/c++/4.2.1 --program-prefix=i686-apple-darwin10- -- 
host=x86_64-apple-darwin10 --target=i686-apple-darwin10
Thread model: posix
gcc version 4.2.1 (Apple Inc. build 5646)

$ sudo dtruss -f ./nmap 127...1 -v # last 40 lines
28092/0xb053:  write_nocancel(0x1, "Initiating SYN Stealth Scan at  
16:27\n\0", 0x25)		 = 37 0
28092/0xb053:  socket(0x2, 0x3, 0xFF)            = 3 0
28092/0xb053:  setsockopt(0x3, 0xFFFF, 0x20)             = 0 0
28092/0xb053:  setsockopt(0x3, 0x0, 0x2)                 = 0 0
28092/0xb053:  write_nocancel(0x1, "Scanning localhost (127.0.0.1)  
[1000 ports]\n\0", 0x2C)		 = 44 0
28092/0xb053:  open("/dev/bpf0\0", 0x2, 0x0)           = -1 Err#16
28092/0xb053:  open("/dev/bpf1\0", 0x2, 0x0)           = 5 0
28092/0xb053:  ioctl(0x5, 0x40044271, 0x7FFF5FBFAA60)            = 0 0
28092/0xb053:  __sysctl(0x7FFF5FBFA9B0, 0x2, 0x7FFF5FBFAA70)             = 0 0
28092/0xb053:  __sysctl(0x7FFF5FBFA9B0, 0x2, 0x7FFF5FBFAB70)             = 0 0
28092/0xb053:  __sysctl(0x7FFF5FBFA9B0, 0x2, 0x7FFF5FBFAC70)             = 0 0
28092/0xb053:  __sysctl(0x7FFF5FBFA9B0, 0x2, 0x7FFF5FBFAD70)             = 0 0
28092/0xb053:  __sysctl(0x7FFF5FBFA9B0, 0x2, 0x7FFF5FBFAE70)             = 0 0
28092/0xb053:  ioctl(0x5, 0x40044266, 0x7FFF5FBFAA54)            = 0 0
28092/0xb053:  ioctl(0x5, 0xC0044266, 0x7FFF5FBFAA54)            = 0 0
28092/0xb053:  ioctl(0x5, 0x8020426C, 0x7FFF5FBFAF70)            = 0 0
28092/0xb053:  ioctl(0x5, 0x4004426A, 0x7FFF5FBFAA54)            = 0 0
28092/0xb053:  ioctl(0x5, 0xC00C4279, 0x7FFF5FBFAA30)            = 0 0
28092/0xb053:  ioctl(0x5, 0xC00C4279, 0x7FFF5FBFAA30)            = 0 0
28092/0xb053:  ioctl(0x5, 0x80044275, 0x7FFF5FBFAA58)            = 0 0
28092/0xb053:  ioctl(0x5, 0x8008426D, 0x7FFF5FBFAA10)            = 0 0
28092/0xb053:  ioctl(0x5, 0x40044266, 0x7FFF5FBFAA54)            = 0 0
28092/0xb053:  ioctl(0x5, 0x80104267, 0x7FFF5FBFAA20)            = 0 0
28092/0xb053:  socket(0x2, 0x2, 0x0)             = 6 0
28092/0xb053:  ioctl(0x6, 0xC0206921, 0x7FFF5FBFA380)            = 0 0
28092/0xb053:  ioctl(0x6, 0xC0206925, 0x7FFF5FBFA380)            = 0 0
28092/0xb053:  close(0x6)                = 0 0
28092/0xb053:  sigprocmask(0x1, 0x0, 0x7FFF5FBFA380)             = 0x0 0
28092/0xb053:  sigaltstack(0x0, 0x7FFF5FBFA370, 0x0)             = 0 0
28092/0xb053:  ioctl(0x5, 0x80104267, 0x7FFF5FBFA410)            = 0 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0
28092/0xb053:  sendto(0x3, 0x1010B1BC0, 0x2C)            = 44 0

s.

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org