Snort mailing list archives

Re: Segfault


From: Chris Timmons <cwt () networks cwu edu>
Date: Thu, 15 May 2003 12:33:05 -0700 (PDT)


If your segfault is at mwm.c:905

        905                   if( patrn->psPatCase[0] == Tc[T-Tx] )

You're a lucky winner!  I've seen posts on -devel which also reproduce
this, as I am doing here as well.  I've fallen back to a 1.9.1 environment
for the testing I'm doing.

-c

(gdb) bt
#0  0x8066569 in mwmSearchExNoBC (ps=0x96b0000,
    Tx=0x809c380
"/756693/04SI_FRNTCNTR_160X600_SWF.SWF?CLICKTAG=HTTP://AD.DOUBLECLICK.NET/CLICK;H=V2|2F9D|3|0|*|Q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~FDR=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
n=259,
    Tc=0x8124100
"/756693/04SI_FRNTCNTR_160x600_SWF.swf?clickTag=http://ad.doubleclick.net/click;h=v2|2f9d|3|0|*|q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~fdr=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
match=0x805d748 <otnx_match>,
    data=0x809c254) at mwm.c:905

#1  0x80670ad in mwmSearch (pv=0x96b0000,
    T=0x8124100
"/756693/04SI_FRNTCNTR_160x600_SWF.swf?clickTag=http://ad.doubleclick.net/click;h=v2|2f9d|3|0|*|q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~fdr=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
n=259, match=0x805d748 <otnx_match>,
    data=0x809c254) at mwm.c:1402

#2  0x8067346 in mpseSearch (pv=0x96899b0,
    T=0x8124100
"/756693/04SI_FRNTCNTR_160x600_SWF.swf?clickTag=http://ad.doubleclick.net/click;h=v2|2f9d|3|0|*|q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~fdr=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
n=259, action=0x805d748 <otnx_match>,
    data=0x809c254) at mpse.c:219
#3  0x805dab0 in fpEvalPacket (p=0xbfbff034) at fpdetect.c:869
#4  0x805aa41 in Detect (p=0xbfbff034) at detect.c:283
#5  0x805a818 in Preprocess (p=0xbfbff034) at detect.c:104
#6  0x8055c92 in ProcessPacket (user=0x0, pkthdr=0xbfbff500, pkt=0x81f1002
"") at snort.c:595
#7  0x280b8dee in pcap_offline_read () from /usr/lib/libpcap.so.2
#8  0x280c29c5 in pcap_loop () from /usr/lib/libpcap.so.2
#9  0x8056e2b in InterfaceThread (arg=0x0) at snort.c:1518
#10 0x8055b5a in SnortMain (argc=5, argv=0xbfbff63c) at snort.c:537
#11 0x8055620 in main (argc=5, argv=0xbfbff63c) at snort.c:165
(gdb)



-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: