[Snort-devel] Bugfix for RulesFile parser

Achim Gsell a at ...384...
Thu May 3 12:27:29 EDT 2001


Hi,

The patch in the attachment fixes a bug in the rules file parser, which may 
crash snort with a SEGV. The following config file gives you an example to 
reproduce the error:

# base config
config ghetto_msg:      url
config umask:           0177
config alert_with_interface_name:
config utc:
config show_year:
 
include /etc/ids/idrules/classification.config

var EXTERNAL_NET        any
var HOME_NET            172.23.0.0/16
...


Snort crashes after reading the include file (this is independent from the 
content of the include file).

Achim
-------------- next part --------------
A non-text attachment was scrubbed...
Name: snort.patch
Type: text/x-c
Size: 3644 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20010503/cd4ae960/attachment.bin>


More information about the Snort-devel mailing list