Nmap 3.25 core dumps on OpenBSD 3.2

[Eric <eric-list-nmap () catastrophe net>]

Nmap 3.25, compiled under OpenBSD 3.2 (p.s. thanks for fixing the
Makefile!) coredumps after performing a large scan for quite some
time. Also, I noticed some SIGSEGV problems as well that didn't
produce a corefile.

Here's what I see...

$ gdb -c nmap.core nmap 
warning: failed to install memory consistency checks;
configuration should define NO_MMCHECK or MMCHECK_FORCE
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License,
and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-unknown-openbsd3.2"...
Core was generated by `nmap'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libpcap.so.1.2...done.
Reading symbols from /usr/lib/libstdc++.so.30.0...done.
Reading symbols from /usr/lib/libm.so.0.1...done.
Reading symbols from /usr/lib/libc.so.28.5...done.
#0  0x23927 in freeFingerPrint (FP=0x3ea60c35) at osscan.cc:1040
1040       nextFP = currentFP->next;
(gdb) bt
#0  0x23927 in freeFingerPrint (FP=0x3ea60c35) at osscan.cc:1040
#1  0x3cd5e in Target::FreeInternal (this=0xe22800) at Target.cc:96
#2  0x3ccdf in Target::~Target (this=0xe22800, __in_chrg=3) at Target.cc:84
#3  0x79ee in nmap_main (argc=23, argv=0x52004) at nmap.cc:957
#4  0x1fbe in main (argc=3, argv=0xcfbfd3e8, envp=0xcfbfd3f8) at main.cc:153
(gdb) break
Breakpoint 1 at 0x23927: file osscan.cc, line 1040.

Nmap was run like this...

nmap -sS -O --osscan_guess -oA nmap-2003:04:22-17:12:38-UTC \
-PS22,25,80,113,139,443,445 -PT80,113 -PU53,137 -PA22,80,139,445 -PM -PE \
-p 19,21-23,25,53,79-80,110,113,119,139,135,143,389,443,445,515,636,1080,
   1433,1494,1521,2000,3128,3306,5500,5800,5900,6000,8080,9100 \
   -T 4 -g 53 -d -v -v 10.254.0.0/16 

I'll hold onto the corefile for a while if need be.

- Eric


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).