[Bro-Dev] [JIRA] (BIT-1537) bro segfaults after compile in MacOS X 10.11 El Capitan

Carlos Terrón (JIRA) jira at bro-tracker.atlassian.net
Mon Feb 29 00:50:00 PST 2016


    [ https://bro-tracker.atlassian.net/browse/BIT-1537?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=24500#comment-24500 ] 

Carlos Terrón commented on BIT-1537:
------------------------------------

Hi Johanna 

Sorry for the delay
{code}
baldurgate:bin terron$otool -L bro
bro:
	/usr/lib/libssl.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8)
	/usr/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8, current version 0.9.8)
	/usr/lib/libresolv.9.dylib (compatibility version 1.0.0, current version 1.0.0)
	/usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.5)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
{code}
(the binary that segfaults). I'm going to try compile with an openssl library and check that the include headers are not mixed with system ones.

> bro segfaults after compile in MacOS X 10.11 El Capitan
> -------------------------------------------------------
>
>                 Key: BIT-1537
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1537
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: 2.4
>            Reporter: Carlos Terrón
>             Fix For: 2.5
>
>
> After compile with 
> {code}
> ./configure --prefix=/usr/local
> make
> make install
> {code}
> And try to execute bro with:
> {code}
> bro -i en4 local
> {code}
> bro segfaults with
> {code}
> Program received signal SIGSEGV, Segmentation fault.
> 0x00000001003045d2 in file_analysis::X509::ParseCertificate (
>     cert_val=<optimized out>, fid=<optimized out>)
>     at /Users/terron/tmp/bro-2.4.1/src/file_analysis/analyzer/x509/X509.cc:175
> 175				char *exponent = BN_bn2dec(pkey->pkey.rsa->e);
> (gdb) bt
> #0  0x00000001003045d2 in file_analysis::X509::ParseCertificate (
>     cert_val=<optimized out>, fid=<optimized out>)
>     at /Users/terron/tmp/bro-2.4.1/src/file_analysis/analyzer/x509/X509.cc:175
> #1  0x0000000100303e5d in file_analysis::X509::EndOfFile (this=0x105f8b710)
>     at /Users/terron/tmp/bro-2.4.1/src/file_analysis/analyzer/x509/X509.cc:56
> #2  0x000000010033f57a in file_analysis::File::EndOfFile (this=0x100961090)
>     at /Users/terron/tmp/bro-2.4.1/src/file_analysis/File.cc:522
> #3  0x000000010033bc6e in file_analysis::Manager::RemoveFile (
>     this=0x105f8b710, file_id=...)
>     at /Users/terron/tmp/bro-2.4.1/src/file_analysis/Manager.cc:395
> #4  0x00000001002d910a in binpac::TLSHandshake::Handshake_Conn::proc_certificate (this=0x105f8a220, is_orig=false, certificates=0x100961f90)
>     at /Users/terron/tmp/bro-2.4.1/build/src/analyzer/protocol/ssl/tls-handshake_pac.cc:180
> #5  0x00000001002d99d4 in binpac::TLSHandshake::Handshake_Conn::proc_v3_certificate (this=0x105f8b710, is_orig=16, cl=<optimized out>)
>     at /Users/terron/tmp/bro-2.4.1/build/src/analyzer/protocol/ssl/tls-handshake_pac.cc:323
> #6  0x00000001002dc430 in binpac::TLSHandshake::Certificate::Parse (
>     this=0x105f8a220, t_begin_of_data=<optimized out>, 
>     t_end_of_data=0x101022f2e "", t_context=0x10095e480)
>     at /Users/terron/tmp/bro-2.4.1/build/src/analyzer/protocol/ssl/tls-handshake_pac.cc:1977
> {code}



--
This message was sent by Atlassian JIRA
(v7.2.0-OD-03-005#72000)



More information about the bro-dev mailing list