[Snort-users] SIGSEGV for snort 1.6.2.2

Francois Baligant francois at ...101...
Thu Jul 20 06:09:14 EDT 2000


#0  0x80527ac in CheckTcpFlagsEq (p=0xbffff790, otn_idx=0x807c030, 
    fp_list=0x807c948) at sp_tcp_flag_check.c:156
156         if (flagptr->tcp_flags == p->tcph->th_flags)
(gdb) print flagptr->tcp_flags
$1 = 3 '\003'
(gdb) print p->tcph
$2 = (TCPHdr *) 0x0
(gdb) print p
$3 = (Packet *) 0xbffff790

	It looks like a non-TCP packet got geed to CheckTcpFlagsEq.

	As I don't really know how snort works internaly right now,
	I have made a dirty fix 
		
	if (!p->tcph)
		return 0

	Anyone got a better idea ?

	regards,
	Francois

Francois Baligant            * *       EuroNet Internet NV/SA
Network Operation Center   *     *     a subsidiary of France Telecom
                          *            Lozenberg 22 - B-1932 Zaventem
FB1-6BONE                *             tel: +32 2 717 17 17
francois at ...101...                   fax: +32 2 717 17 77






More information about the Snort-users mailing list