Could you create an issue for this on github?
could you also paste some related lines from /opt/secrets/log/8.8.8.8.log ?
El 03/01/17 a las 13:54, Lennard Klein escribió:
Hi list,
I've ran into a segfault in libfastjson.
First some details:
RHEL7 using adiscon repositories:
libfastjson4.x86_64 0.99.4-1.el7
rsyslog.x86_64 8.23.0-1.el7
The following bit of config segfaults rsyslog, as soon as it starts processing
the first message (its own startup message):
if( $!rfc5424-sd!origin!ip == '8.8.8.8' ) then {
action(type="omfile" file="/opt/secrets/log/8.8.8.8.log"
template="RSYSLOG_DebugFormat")
& stop
}
Running rsyslog -dn, this is the snippet just before the segfault:
4184.634573199:main Q:Reg/w0 : IF
4184.634578377:main Q:Reg/w0 : var '!rfc5424-sd!origin!ip'
4184.634585979:main Q:Reg/w0 : ==
4184.634591759:main Q:Reg/w0 : string '172.22.222.17'
4184.634601617:main Q:Reg/w0 : eval expr 0x7f615a4b2020, type 'CMP_EQ'
4184.634604257:main Q:Reg/w0 : eval expr 0x7f615a49ec90, type 'V'
Comparing this to some other debugging output I'm guessing the next step in
processing is resolving the variable.
As I had a theory the segfault might be due to nothing being in the JSON tree
yet, I Added the following line just before the if-statement:
set $!foo = "bar";
Which resulted in the message being processed as expected.
As I'm not at all familiar with the rsyslog code base, this is as far as I can
get in my analysis at the moment. Does anyone have suggestions on how to
proceed?
Regards,
Lennard Klein
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
