[Snort-users] Segfault

Chris Timmons cwt at ...9194...
Thu May 15 12:58:10 EDT 2003


If your segfault is at mwm.c:905

	905                   if( patrn->psPatCase[0] == Tc[T-Tx] )

You're a lucky winner!  I've seen posts on -devel which also reproduce
this, as I am doing here as well.  I've fallen back to a 1.9.1 environment
for the testing I'm doing.

-c

(gdb) bt
#0  0x8066569 in mwmSearchExNoBC (ps=0x96b0000,
    Tx=0x809c380
"/756693/04SI_FRNTCNTR_160X600_SWF.SWF?CLICKTAG=HTTP://AD.DOUBLECLICK.NET/CLICK;H=V2|2F9D|3|0|*|Q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~FDR=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
n=259,
    Tc=0x8124100
"/756693/04SI_FRNTCNTR_160x600_SWF.swf?clickTag=http://ad.doubleclick.net/click;h=v2|2f9d|3|0|*|q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~fdr=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
match=0x805d748 <otnx_match>,
    data=0x809c254) at mwm.c:905

#1  0x80670ad in mwmSearch (pv=0x96b0000,
    T=0x8124100
"/756693/04SI_FRNTCNTR_160x600_SWF.swf?clickTag=http://ad.doubleclick.net/click;h=v2|2f9d|3|0|*|q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~fdr=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
n=259, match=0x805d748 <otnx_match>,
    data=0x809c254) at mwm.c:1402

#2  0x8067346 in mpseSearch (pv=0x96899b0,
    T=0x8124100
"/756693/04SI_FRNTCNTR_160x600_SWF.swf?clickTag=http://ad.doubleclick.net/click;h=v2|2f9d|3|0|*|q;5350782;0-0;0;7957744;9322-160|600;2515096|2513290|1;;~fdr=5351353;0-0;0;7958267;9322-160|600;2515677|2"...,
n=259, action=0x805d748 <otnx_match>,
    data=0x809c254) at mpse.c:219
#3  0x805dab0 in fpEvalPacket (p=0xbfbff034) at fpdetect.c:869
#4  0x805aa41 in Detect (p=0xbfbff034) at detect.c:283
#5  0x805a818 in Preprocess (p=0xbfbff034) at detect.c:104
#6  0x8055c92 in ProcessPacket (user=0x0, pkthdr=0xbfbff500, pkt=0x81f1002
"") at snort.c:595
#7  0x280b8dee in pcap_offline_read () from /usr/lib/libpcap.so.2
#8  0x280c29c5 in pcap_loop () from /usr/lib/libpcap.so.2
#9  0x8056e2b in InterfaceThread (arg=0x0) at snort.c:1518
#10 0x8055b5a in SnortMain (argc=5, argv=0xbfbff63c) at snort.c:537
#11 0x8055620 in main (argc=5, argv=0xbfbff63c) at snort.c:165
(gdb)





More information about the Snort-users mailing list