PAL, many thanks! In line 10 of your localconfig.sl.patch + logf[pl+1].file = logf[pl+1].ffile = logf[pl+1].alias = logf[pl].logformat = NULL; Should it be this instead? + logf[pl+1].file = logf[pl+1].ffile = logf[pl+1].alias = logf[pl+1].logformat = NULL;
On Friday, September 21, 2012 6:01:49 AM UTC-7, PAL wrote: > > A new bug found. > When I tried to use file mask in logcheck config, I got segfault again! > Let configure: > >> <localfile> >> <log_format>apache</log_format> >> <location>/var/log/nginx/*.log</location> >> </localfile> >> > > And suppose we have a few (or lot :) ) log files in directory (in any case > more than two) > Lets start ossec. Oops! We got a segfault on read config step! > > Patch to fix that in attachment. IMO, stupid mistake made by developers :( > - they used incorrect variable name and do not correctly init variables, > when check globs. > > >
