[Bro-Dev] #842: Adding a logging filter without a path hangs bro

Bro Tracker bro at tracker.bro-ids.org
Tue Jul 3 01:54:04 PDT 2012

#842: Adding a logging filter without a path hangs bro
 Reporter:  amannb   |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:
Component:  Bro      |    Version:  git/master
 Keywords:           |
 The following short script brings Bro to a standstill on my system when
 encountering the first http request

 event bro_init() {
         local filter: Log::Filter = [$name="host-only",
         Log::add_filter(HTTP::LOG, filter);

 When a path is added to the filter definition, everything works fine.
 However, the path is marked as optional in the framework.

 When running with an attached gdb, the following error is shown on the
 first http access:

 Program received signal EXC_BAD_ACCESS, Could not access memory.
 Reason: 13 at address: 0x0000000000000000
 [Switching to process 6370 thread 0x2503]
 0x00000001003dec18 in threading::Value::~Value (this=0x30000000102ed731)
 at SerialTypes.cc:52
 52              if ( (type == TYPE_ENUM || type == TYPE_STRING || type ==
 TYPE_FILE || type == TYPE_FUNC)
 (gdb) bt
 #0  0x00000001003dec18 in threading::Value::~Value
 (this=0x30000000102ed731) at SerialTypes.cc:52
 #1  0x00000001003f205c in logging::WriterBackend::DeleteVals
 (this=0x10224c800, num_writes=66, vals=0x102252400) at
 #2  0x00000001003f227c in logging::WriterBackend::Write (this=0x10224c800,
 arg_num_fields=26, num_writes=66, vals=0x102252400) at
 #3  0x00000001003f789e in logging::WriteMessage::Process
 (this=0x104a13d30) at WriterFrontend.cc:60
 #4  0x00000001003d477a in threading::MsgThread::Run (this=0x10224c800) at
 #5  0x00000001003cfa57 in threading::BasicThread::launcher
 (arg=0x10224c800) at BasicThread.cc:170
 #6  0x00007fff87f738bf in _pthread_start ()
 #7  0x00007fff87f76b75 in thread_start ()

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/842>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list