[Snort-devel] Bugfix for RulesFile parser

Achim Gsell a at ...384...
Thu May 3 12:27:29 EDT 2001


The patch in the attachment fixes a bug in the rules file parser, which may 
crash snort with a SEGV. The following config file gives you an example to 
reproduce the error:

# base config
config ghetto_msg:      url
config umask:           0177
config alert_with_interface_name:
config utc:
config show_year:
include /etc/ids/idrules/classification.config

var EXTERNAL_NET        any
var HOME_NET  

Snort crashes after reading the include file (this is independent from the 
content of the include file).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: snort.patch
Type: text/x-c
Size: 3644 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20010503/cd4ae960/attachment.bin>

More information about the Snort-devel mailing list