Hello Michael,

I wasn't able to reproduce in my setup with running openvas-scanner as a
non-root user. I see these messages in openvassd.dump,

Failed to find interface eth0 mentioned in /proc/net/route

Can you enable TCPIP_DEBUGGING and let us know if the value is NULL and if
you add a NULL check, does it solve the problem? I am suspecting something
specific to the system IP address config or the route entries.

Thanks,
Chandra.
 

> -----Original Message-----
> From: openvas-devel-boun...@wald.intevation.org 
> [mailto:openvas-devel-boun...@wald.intevation.org] On Behalf 
> Of Michael Wiegand
> Sent: Wednesday, November 18, 2009 8:38 PM
> To: OpenVAS Development Mailing List
> Subject: [Openvas-devel] Segfault in IPv6 Code
> 
> Hello,
> 
> I was using the most recent SVN versions of openvas-libraries 
> and -scanner yesterday and discovered a large amount of 
> following messages in my openvassd.dump during a full scan:
> Failed to find interface eth0 mentioned in /proc/net/route
> 
> And in my openvassd.messages, some thirty messages indicating 
> segmentation faults in NVTs:
> [27687] SIGSEGV occured !
> [30820] Process 27687 seems to have died too early [30820] 
> process_internal_msg for jolt2.nasl returned -1
> 
> I suspected the source in openvas-libraries/misc/pcap.c since 
> the message in openvassd.dump seemed to originate there. Sure 
> enough, when I reverted both -libraries and -scanner to SVN 
> revision 5827 (before the latest big changes to the file in 
> the course of the IPv6 patch), the messages were gone.
> 
> Together with Michael Meyer I debugged the issue and 
> discovered that the issue seems to be indeed in pcap.c and 
> can be reproduced consistently with:
> openvas-nasl -X -t <target> /your/path/to/jolt2.nasl
> 
> At least on my machine; the segfault does not seem to show up 
> everywhere. FWIW, I'm running openvas-scanner as a non-root 
> user in an IPv4 network.
> 
> I have attached a backtrace of the segfault and both logs; 
> there core issue seems to be v6_routethrough() trying to 
> memcpy a null pointer on line 1222 of pcap.c.
> 
> Let me know if you need more information, I'm looking forward 
> to a bugfix. ;)
> 
> Regards,
> 
> Michael
> 
> --
> Michael Wiegand | OpenPGP: D7D049EC | Intevation GmbH - 
> www.intevation.de
> Neuer Graben 17, 49074 Osnabrück, Germany   |    AG 
> Osnabrück, HR B 18998
> Geschäftsführer: Frank Koormann,  Bernhard Reiter,  Dr. 
> Jan-Oliver Wagner
> 

_______________________________________________
Openvas-devel mailing list
Openvas-devel@wald.intevation.org
http://lists.wald.intevation.org/mailman/listinfo/openvas-devel

Reply via email to