Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-22 Thread Todd Rinaldo
On Feb 19, 2010, at 9:23 PM, Timo Sirainen wrote: On Fri, 2010-02-19 at 15:28 -0600, Todd Rinaldo wrote: pop3-login[24451]: segfault at 000c rip 003c7de610a2 rsp 7fff07116968 error 4 I'm having a really hard time getting a core dump Yeah, it's difficult to get login

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-22 Thread Timo Sirainen
On 22.2.2010, at 19.49, Todd Rinaldo wrote: gdb -p `pidof imap-login` cont wait for crash bt full Tim, Thanks for the feedback. In the other email you sent about re-producing with nessus, note that we're using the checkpassword system, however from strace info so far we think the error

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-22 Thread Todd Rinaldo
On Feb 22, 2010, at 11:57 AM, Timo Sirainen wrote: Well, that's coming from Kerberos library, which is called by OpenSSL for some reason.. Are you using Kerberos? Anyway it looks to me more like OpenSSL or Kerberos bug. Tim, Below is the stack trace with symbols. The bug appears to

[Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-19 Thread Todd Rinaldo
We've been struggling with a problem for the past couple of days which to this point I've only gotten to be able to boil down to this: 1. Install nessus home edition (less pluggins I assume) 2. run all scans (sequentially or in parallel, doesn't seem to matter) 3. about 3 minutes in

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-19 Thread Timo Sirainen
On Fri, 2010-02-19 at 15:28 -0600, Todd Rinaldo wrote: pop3-login[24451]: segfault at 000c rip 003c7de610a2 rsp 7fff07116968 error 4 I'm having a really hard time getting a core dump Yeah, it's difficult to get login processes to core dump. In v1.2 it's easier though.

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-19 Thread Timo Sirainen
On Sat, 2010-02-20 at 05:23 +0200, Timo Sirainen wrote: On Fri, 2010-02-19 at 15:28 -0600, Todd Rinaldo wrote: pop3-login[24451]: segfault at 000c rip 003c7de610a2 rsp 7fff07116968 error 4 BTW. I just tried with Nessus, but couldn't reproduce this. signature.asc