nmap 6.0x crash with ipv6 traceroute

[Pierre Emeriaud <petrus.lt () gmail com>]

Hello,


I've been able to crash nmap 6.00 and 6.01 consistently, when
performing the traceroute after an udp scan on an ipv6 host.

- Several targets have been tested, through different interfaces and networks.
- Scanning without -sU does not make nmap crash

Tested versions :

$ nmap --version
Nmap version 6.00 ( http://nmap.org )
Platform: x86_64-unknown-linux-gnu
Compiled with: nmap-liblua-5.1.3 openssl-0.9.8o nmap-libpcre-7.6
nmap-libpcap-1.2.1 nmap-libdnet-1.12 ipv6
Compiled without:

$ ./nmap --version
Nmap version 6.01 ( http://nmap.org )
Platform: x86_64-unknown-linux-gnu
Compiled with: nmap-liblua-5.1.3 openssl-0.9.8o nmap-libpcre-7.6
libpcap-1.1.1 nmap-libdnet-1.12 ipv6
Compiled without:

Command line :
$ sudo ./nmap -v -6 -A -sV -sU <ipv6 address>

Error message :
Initiating Traceroute at 22:53
nmap: traceroute.cc:749: virtual unsigned char*
UDPProbe::build_packet(const sockaddr_storage*, u32*) const: Assertion
`source->ss_family == 2' failed.


Full nmap scan output to different targets (ipv6 addresses have been
slightly edited) :
http://pastebin.com/raw.php?i=wtzNYPxW


Please let me know if I can do more to help (running nmap in
gdb/strace/fancy debug tool?).


Thanks,
pierre.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/