Re: NMap 7.40 Bug report, IPv6 OSscan causes fatal error on IOD deletion

Daniel Miller <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CABmvJnPyikewHxHVzD32b0SCP3ABMxGv8a69aybkYHrRh9N7nQ@mail.gmail.com>
Bob,

Thanks for the report and the fix! This is good analysis. I've applied a
simpler version of your fix in r36949 to clean up any remaining pcap read
events when deleting an IOD. I will try to spend a little time looking at
why the event was not deleted on Windows.

Dan

On Tue, Aug 8, 2017 at 10:00 AM, Reese, Robert <[email protected]>
wrote:

> A bug-fix for this problem has been submitted via a pull request on Github.
>
>
>
> https://github.com/nmap/nmap/pull/961
>
>
>
>
>
> Thanks,
>
>
>
> Bob Reese
>
>
>
>
>
> Dr. Robert Reese
>
> Associate Professor, ECE, Mississippi State University
>
> US Mail: Box 9571, Miss State, MS 39762
>
> Courier: 406 Hardy Rd, Simrall Bldg, Miss State, MS 39762
>
> 662 325 3154 <(662)%20325-3154>
>
>
>
>
>
>
>
> *From:* Reese, Robert
> *Sent:* Wednesday, August 02, 2017 10:21 AM
> *To:* '[email protected]' <[email protected]>
> *Subject:* NMap 7.40 Bug report, IPv6 OSscan causes fatal error on IOD
> deletion
>
>
>
> Executive summary:
>
> (I looked for this error in the archives, found one reference, but this
> looks like a different solution).
>
> Nmap 7.40 on Windows 7. Scan of two IPv6 hosts with OS detection enabled;
> OS detection on second host causes fatal error exit when it attempts to
> delete the IOD used by OS detection on the first host. The IOD delete
> function (nsock_iod.c/nsock_iod_delete function attempts to delete the
> nsock_iod, but it cannot find the pending event, so it aborts through fatal
> function in nsock/error.c with message ““Trying to delete NSI, but could
> not find the purportedly pending events on that IOD”.
>
>
>
> This was run with options:
>
> nmap -oX -  -6  -F -d4  -T3 -O  --max-hostgroup 1 -iL hosts.txt 2>
> tmperr.txt
>
>
>
> The max-hostgroup was limited to 1 to remove host parallelism. It seems to
> be immaterial which host is queried first.  This is triggered by OS scan;
> the problem does not occur when the –O option is removed.
>
>
>
> There are more details in the attached files, including debugging
> screenshots from Visual Studio 2013. I can debug this if I have a little
> help on how to proceed.
>
>
>
> Thanks,
>
>
>
> Bob R
>
>
>
>
>
>
>
> Dr. Robert Reese
>
> Associate Professor, ECE, Mississippi State University
>
> US Mail: Box 9571, Miss State, MS 39762
>
> Courier: 406 Hardy Rd, Simrall Bldg, Miss State, MS 39762
>
> 662 325 3154 <(662)%20325-3154>
>
>
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
>

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.