Re: Exception fail / crash

[Ron <ron () skullsecurity net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 27 Jan 2012 15:30:13 +0100 Henri Doreau <henri.doreau () gmail com> wrote:
> 2012/1/27 Ron <ron () skullsecurity net>:
> > Hey,
> >
> > I'm running into this exception:
> >
> > nmap: nsock_core.c:186: update_events: Assertion `(ev_inc & ev_dec)
> > == 0' failed.
> >
> > It happens during the script scan. I can reproduce the errror, but
> > it takes a couple hours. Here's my commandline:
> >
> > sudo ./nmap -sT -T4 -n -d -p- -A --log-errors --script="(safe or
> > http-* or smtp-* or pop3-* or sip-*) and not *brute* and not
> > *broadcast* and not *fuzz* and not *firewalk* and not *qscan*"
> > --min-hostgroup=100 -PN
> > - -oA out --min-rate 100 -iL targets.txt
> >
> > Let me know if you need further information. I don't have a core
> > file, but I can probably get one if necessary.
> >
> > Ron
>
> Hi Ron,
>
> Thanks for the report. I'll investigate the problem.
> Currently I can't reproduce it, so a coredump or debug output would
> probably help, if that's ok for you.
>
> Regards.
>
> -- 
> Henri
I got it loaded in gdb. I don't really know how to use gdb, though, so let me know if there are any commands you want 
me to run. 

Here's the backtrace:
#0  0x00007ffff61f7b05 in raise () from /lib64/libc.so.6
#1  0x00007ffff61f8f86 in abort () from /lib64/libc.so.6
#2  0x00007ffff61f0735 in __assert_fail () from /lib64/libc.so.6
#3  0x00000000004a8ed7 in update_events (iod=<optimized out>, 
    ms=<optimized out>, ev_inc=<optimized out>, ev_dec=<optimized out>) at nsock_core.c:186
#4  0x00000000004a94a3 in handle_write_result (ms=0x16959c0, nse=0x3507450, status=<optimized out>) at nsock_core.c:542
#5  0x00000000004aadf9 in process_event (nsp=0x16959c0, evlist=<optimized out>, nse=0x3507450, ev=<optimized out>) at 
nsock_core.c:969
#6  0x00000000004aafdd in process_iod_events (nsp=0x16959c0, nsi=0x3621fe0, ev=2) at nsock_core.c:1102
#7  0x00000000004af14f in iterate_through_event_lists (evcount=4, nsp=0x16959c0) at engine_epoll.c:348
#8  epoll_loop (nsp=0x16959c0, msec_timeout=<optimized out>) at engine_epoll.c:304
#9  0x00000000004a9cba in nsock_loop (nsp=0x16959c0, msec_timeout=50) at nsock_core.c:909
#10 0x000000000049bfa5 in loop (L=0x1688c20) at nse_nsock.cc:472
#11 0x00007ffff7142a14 in ?? () from /usr/lib64/liblua.so.5
#12 0x00007ffff7142b06 in ?? () from /usr/lib64/liblua.so.5
#13 0x00007ffff713f9a7 in lua_call () from /usr/lib64/liblua.so.5
#14 0x0000000000499bbc in nsock_loop (L=0x1688c20) at nse_main.cc:156
#15 0x00007ffff7142a14 in ?? () from /usr/lib64/liblua.so.5
#16 0x00007ffff714ad13 in ?? () from /usr/lib64/liblua.so.5
#17 0x00007ffff7142b17 in ?? () from /usr/lib64/liblua.so.5
#18 0x00007ffff7142102 in ?? () from /usr/lib64/liblua.so.5
#19 0x00007ffff7142c5c in ?? () from /usr/lib64/liblua.so.5
#20 0x00007ffff713fa15 in lua_pcall () from /usr/lib64/liblua.so.5
#21 0x0000000000499b29 in run_main (L=0x1688c20) at nse_main.cc:470
#22 0x00007ffff7142a14 in ?? () from /usr/lib64/liblua.so.5
#23 0x00007ffff7142b06 in ?? () from /usr/lib64/liblua.so.5
#24 0x00007ffff7142102 in ?? () from /usr/lib64/liblua.so.5
#25 0x00007ffff7142c5c in ?? () from /usr/lib64/liblua.so.5
#26 0x00007ffff713fa5b in lua_cpcall () from /usr/lib64/liblua.so.5
#27 0x000000000049aad1 in script_scan (targets=std::vector of length 14, capacity 100 = {...}, scantype=<optimized 
out>) at nse_main.cc:631
#28 0x0000000000434d13 in nmap_main (argc=17, argv=<optimized out>) at nmap.cc:1962
#29 0x000000000042db8f in main (argc=17, argv=0x7fffffffe488) at main.cc:195

I should mention, this is the latest svn version as of last night. 

I can send you the core off list, if you want. It has private data in it, though, so I don't want to post it publicly. 

Thanks for the quick response and looking into it! 

Ron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk8itloACgkQ2t2zxlt4g/SOdwCggRzPEJ20EFvK9dTwq3AK0FoH
tHkAn13/YUmkrTS2HrJBc9tuMmcExxiu
=P76d
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/