[Prelude Hybrid IDS] #179: Prelude Manager coredumps on FreeBSD 6.1p7
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#179: Prelude Manager coredumps on FreeBSD 6.1p7 ------------------------------------------+--------------------------------- Reporter: Robin <[email protected]> | Owner: yoann Type: defect | Status: new Priority: high | Milestone: Component: prelude-manager | Version: 0.9 Severity: normal | Keywords: ------------------------------------------+--------------------------------- Hello, Last Monday we have upgraded one of our test systems to FreeBSD 6.1. Everything went ok, except for Prelude Manager. The Prelude Manager coredumps when trying to start. {{{ - Subscribing Normalize to active decoding plugins. - server started (listening on 127.0.0.1 port 4690). Segmentation fault (core dumped) }}} Then I've removed libprelude, libpreludedb and prelude-manager from the test system and reinstalled it. But no luck... :( Then I have started prelude-manager with gdb and got the following message: {{{ (gdb) run Starting program: /usr/local/bin/prelude-manager (no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...warning: Unable to get location for thread creation breakpoint: generic error [New LWP 100109] (no debugging symbols found)...(no debugging symbols found)...[New Thread 0x8062000 (LWP 100109)] (no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...(no debugging symbols found)...[New LWP 100109] Program received signal SIGSEGV, Segmentation fault. [Switching to LWP 100109] 0x482d0d5b in pthread_rwlock_timedwrlock () from /usr/lib/libpthread.so.2 (gdb) bt #0 0x482d0d5b in pthread_rwlock_timedwrlock () from /usr/lib/libpthread.so.2 #1 0x4805f161 in rlock_release () from /libexec/ld-elf.so.1 #2 0x4805d279 in _rtld_bind () from /libexec/ld-elf.so.1 #3 0x4805b401 in _rtld_bind_start () from /libexec/ld-elf.so.1 #4 0x48440300 in ?? () #5 0x000000f8 in ?? () #6 0x08062400 in ?? () #7 0x4857a6e8 in _thread_keytable () from /usr/lib/libpthread.so.1 #8 0x080625c0 in ?? () #9 0x00000206 in ?? () #10 0x48440300 in ?? () #11 0x000000f8 in ?? () #12 0x48564876 in sigaction () from /usr/lib/libpthread.so.1 #13 0x4856ffb0 in pthread_setconcurrency () from /usr/lib/libpthread.so.1 #14 0x4857327a in pthread_testcancel () from /usr/lib/libpthread.so.1 #15 0x4857440a in __error () from /usr/lib/libpthread.so.1 #16 0x4855b7ae in ?? () from /usr/lib/libpthread.so.1 #17 0x4805bbad in _rtld_error () from /libexec/ld-elf.so.1 #18 0x4805e805 in dlopen () from /libexec/ld-elf.so.1 #19 0x480da925 in sys_dl_open () from /usr/local/lib/libprelude.so.9 #20 0x480db0c8 in tryall_dlopen () from /usr/local/lib/libprelude.so.9 #21 0x480dbad9 in find_handle_callback () from /usr/local/lib/libprelude.so.9 #22 0x480db870 in foreach_dirinpath () from /usr/local/lib/libprelude.so.9 #23 0x480dbb26 in find_handle () from /usr/local/lib/libprelude.so.9 #24 0x480dd2d6 in try_dlopen () from /usr/local/lib/libprelude.so.9 #25 0x480de201 in lt_dlopenext () from /usr/local/lib/libprelude.so.9 #26 0x480ddfac in try_dlopen () from /usr/local/lib/libprelude.so.9 #27 0x480de155 in lt_dlopenext () from /usr/local/lib/libprelude.so.9 #28 0x480b5832 in libltdl_load_cb () from /usr/local/lib/libprelude.so.9 #29 0x480dc5be in foreachfile_callback () from /usr/local/lib/libprelude.so.9 #30 0x480db870 in foreach_dirinpath () from /usr/local/lib/libprelude.so.9 #31 0x480dc7c5 in lt_dlforeachfile () from /usr/local/lib/libprelude.so.9 #32 0x480b5b3c in prelude_plugin_load_from_dir () from /usr/local/lib/libprelude.so.9 #33 0x483c4ba1 in preludedb_init () from /usr/local/lib/libpreludedb.so.4 #34 0x483db9e9 in db_LTX_manager_plugin_init () from /usr/local/lib /prelude-manager/reports/db.so #35 0x480b5975 in libltdl_load_cb () from /usr/local/lib/libprelude.so.9 #36 0x480dc5be in foreachfile_callback () from /usr/local/lib/libprelude.so.9 #37 0x480db870 in foreach_dirinpath () from /usr/local/lib/libprelude.so.9 #38 0x480dc7c5 in lt_dlforeachfile () from /usr/local/lib/libprelude.so.9 #39 0x480b5b3c in prelude_plugin_load_from_dir () from /usr/local/lib/libprelude.so.9 #40 0x08050256 in report_plugins_init () #41 0x0804e3ed in main () }}} What I can see (or what I think it is), is that prelude-manager is using libpthread.so.1. But he suppose to be using libpthread.so.2. The test server is a DL360G4 with Xeon processors. -- Ticket URL: <https://trac.prelude-ids.org/ticket/179> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel