Segmentation fault with RuleMatcher
Yohann Thomas
yohann.thomas at rd.francetelecom.com
Tue May 18 06:35:00 PDT 2004
Arghhhh...It still doesn't work...(Seg Fault)
But I noticed in the patch the following lines :
if ( resp_match_state )
rule_matcher->FinishEndpoint(orig_match_state);
I'm sorry if I'm wrong, but, just looking at the structure of the code,
I thought it could be "resp_match_state" instead of "orig_match_state".
In fact, I tried this and it seems to work now. :-)
How do you feel about that ???
Yohann.
Robin Sommer wrote:
>
> On Tue, May 04, 2004 at 11:24 +0200, Yohann Thomas wrote:
>
> > I dumped a core, to locate the problem, and it seems to crash in
> > RuleMatcher::ExecRule.
>
> Sorry, it took me while to get back to this. Could you try the
> attached patch and see if it helps?
>
> Robin
>
> --
> Robin Sommer * Room 01.08.055 * www.net.in.tum.de
> TU Muenchen * Phone (089) 289-18006 * sommer at in.tum.de
>
>------------------------------------------------------------------------
>
>Common subdirectories: bro-pub-0.8a82/aux and bro-pub-0.8a82-patched/aux
>diff -u bro-pub-0.8a82/Conn.cc bro-pub-0.8a82-patched/Conn.cc
>--- bro-pub-0.8a82/Conn.cc 2004-04-27 21:00:13.000000000 +0200
>+++ bro-pub-0.8a82-patched/Conn.cc 2004-05-18 13:46:38.000000000 +0200
>@@ -724,16 +724,13 @@
> return;
>
> if ( orig_match_state )
>- {
> rule_matcher->FinishEndpoint(orig_match_state);
>- delete orig_match_state;
>- }
>
> if ( resp_match_state )
>- {
>- rule_matcher->FinishEndpoint(resp_match_state);
>- delete resp_match_state;
>- }
>+ rule_matcher->FinishEndpoint(orig_match_state);
>+
>+ delete orig_match_state;
>+ delete resp_match_state;
>
> orig_match_state = resp_match_state = 0;
> }
>Common subdirectories: bro-pub-0.8a82/doc and bro-pub-0.8a82-patched/doc
>Common subdirectories: bro-pub-0.8a82/example-attacks and bro-pub-0.8a82-patched/example-attacks
>Common subdirectories: bro-pub-0.8a82/linux-include and bro-pub-0.8a82-patched/linux-include
>Common subdirectories: bro-pub-0.8a82/policy and bro-pub-0.8a82-patched/policy
>Only in bro-pub-0.8a82-patched/: tmp
>
>
More information about the Bro
mailing list