[Snort-devel] (no subject)

Eric Lauzon eric.lauzon at ...1967...
Thu May 8 09:01:06 EDT 2003


By Martin Roesch (roesch at ...402..., www.snort.org)
snort in free(): warning: chunk is already free.
database: postgresql_error: ERROR:  Bad timestamp external representation
'arachnids'

database: postgresql_error: ERROR:  Bad timestamp external representation ''

snort in free(): error: freelist is destroyed.
Abort (core dumped)
$ sudo gdb -c snort.core snort-2.0.0/src/snort
Password:
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-openbsd3.3"...
Core was generated by `snort'.
Program terminated with signal 6, Abort trap.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libpcap.so.2.0...done.
Reading symbols from /usr/lib/libm.so.1.0...done.
Reading symbols from /usr/local/lib/libpq.so.3.0...done.
Reading symbols from /usr/lib/libc.so.29.0...done.
#0  0x40147fcf in _thread_sys_kill ()
(gdb) bt
#0  0x40147fcf in _thread_sys_kill ()
#1  0x401478bb in abort ()
#2  0x4011b3e9 in strrchr ()
#3  0x4011c92b in realloc ()
#4  0x4011c32c in strrchr ()
#5  0x4011c607 in free ()
#6  0x3d5df in Database (p=0xcfbfd438, msg=0x327dc0 "ICMP PING BSDtype",
arg=0x1d34c0, event=0x32af44)
    at spo_database.c:1196
#7  0x27756 in CallAlertFuncs (p=0xcfbfd438, message=0x327dc0 "ICMP PING
BSDtype", head=0x11bd54, event=0x32af44)
    at detect.c:224
#8  0x2a5bd in AlertAction (p=0xcfbfd438, otn=0x32ae00, event=0x32af44) at
detect.c:1327
#9  0x2e46d in fpLogEvent (rtn=0x244d80, otn=0x32ae00, p=0xcfbfd438) at
fpdetect.c:235
#10 0x2f14e in fpEvalHeaderSW (port_group=0x965380, p=0xcfbfd438,
check_ports=0) at fpdetect.c:949
#11 0x2f59e in fpEvalHeaderIcmp (p=0xcfbfd438) at fpdetect.c:1176
#12 0x2f7ec in fpEvalPacket (p=0xcfbfd438) at fpdetect.c:1316
#13 0x278fc in Detect (p=0xcfbfd438) at detect.c:283
#14 0x274dd in Preprocess (p=0xcfbfd438) at detect.c:104
#15 0x1d22b in ProcessPacket (user=0x0, pkthdr=0x1d8b58, pkt=0x1d8b6a "") at
snort.c:624
#16 0x400982d1 in pcap_read ()
#17 0x4009892f in pcap_loop ()
#18 0x1ffa0 in InterfaceThread (arg=0x0) at snort.c:1547
#19 0x1d08d in SnortMain (argc=7, argv=0xcfbfda18) at snort.c:560
#20 0x1c5f7 in main (argc=7, argv=0xcfbfda18) at snort.c:180

I am getting wierder an wierder coredumps here ..mainly i guess its because
of spo_database but im not sure..anyways
im gonna feed what i consider not being my fault type of bugs.


Eric Lauzon
Analyste en sécurite informatique
eric.lauzon at ...1967...
\0x42\0x49\0x4e\0x46
-----------------------------
1919,boul Lionel-Bertrand
Bureau 203
Boisbriand(Québec)
J7H 1N8
-----------------------------





More information about the Snort-devel mailing list