[Bro-Dev] #394: all.bro loads non-existent policy and segfaults

Bro Tracker bro at tracker.icir.org
Tue Mar 8 10:49:59 PST 2011


#394: all.bro loads non-existent policy and segfaults
----------------------+------------------------
  Reporter:  gregor   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------

Comment (by jsiwek):

 Not loading `capture-events.bro` gets rid of the seg fault in this case,
 but looking into it more, there seems to be a problem in the
 `termination_signal()` function -- `terminate_bro()` will `delete
 event_serializer`, but `BroFile::CloseCachedFiles()` looks like it still
 depends on it.

 Flipping the order of `terminate_bro()` and `BroFile::CloseCachedFiles()`
 gets rid of the seg fault for me, but I'm not sure if that's right.  For
 one it looks like `BroFile::CloseCachedFiles()` uses events, although the
 code/comment indicates they get dispatched immediately.  Otherwise, I'm
 just not familiar enough to say...

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/394#comment:2>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list