Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-03-01 Thread Timo Sirainen
On Mon, 2010-03-01 at 11:48 -0600, Todd Rinaldo wrote: > I opened a bug with Red Hat on this issue. Someone just commented in the > ticket that the issue is probably related to chroot. Does this put things > back in the dovecot court? A full stack trace with symbols is in the ticket > now. You

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-03-01 Thread Todd Rinaldo
On Feb 22, 2010, at 11:57 AM, Timo Sirainen wrote: > On 22.2.2010, at 19.49, Todd Rinaldo wrote: > >>> gdb -p `pidof imap-login` >>> cont >>> >>> bt full >> >> Tim, Thanks for the feedback. In the other email you sent about re-producing >> with nessus, note that we're using the checkpassword

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-22 Thread Todd Rinaldo
On Feb 22, 2010, at 11:57 AM, Timo Sirainen wrote: > > Well, that's coming from Kerberos library, which is called by OpenSSL for > some reason.. Are you using Kerberos? Anyway it looks to me more like OpenSSL > or Kerberos bug. Tim, Below is the stack trace with symbols. The bug appears to

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-22 Thread Timo Sirainen
On 22.2.2010, at 19.49, Todd Rinaldo wrote: >> gdb -p `pidof imap-login` >> cont >> >> bt full > > Tim, Thanks for the feedback. In the other email you sent about re-producing > with nessus, note that we're using the checkpassword system, however from > strace info so far we think the error ha

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-22 Thread Todd Rinaldo
On Feb 19, 2010, at 9:23 PM, Timo Sirainen wrote: > On Fri, 2010-02-19 at 15:28 -0600, Todd Rinaldo wrote: >> pop3-login[24451]: segfault at 000c rip 003c7de610a2 rsp >> 7fff07116968 error 4 >> >> I'm having a really hard time getting a core dump > > Yeah, it's difficult to

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-19 Thread Timo Sirainen
On Sat, 2010-02-20 at 05:23 +0200, Timo Sirainen wrote: > On Fri, 2010-02-19 at 15:28 -0600, Todd Rinaldo wrote: > > pop3-login[24451]: segfault at 000c rip 003c7de610a2 rsp > > 7fff07116968 error 4 BTW. I just tried with Nessus, but couldn't reproduce this. signature.asc D

Re: [Dovecot] segfault - (imap|pop3)-login during nessus scan

2010-02-19 Thread Timo Sirainen
On Fri, 2010-02-19 at 15:28 -0600, Todd Rinaldo wrote: > pop3-login[24451]: segfault at 000c rip 003c7de610a2 rsp > 7fff07116968 error 4 > > I'm having a really hard time getting a core dump Yeah, it's difficult to get login processes to core dump. In v1.2 it's easier though.