[Open-scap] probe_process58 (1.2.10) crashes on SLES11 SP4

[Andreas Krause]

Hello,

with openscap version 1.2.10 probe_process58 crashes on SLES11 SP4.

Minimal oval example:

<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5";
xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5";
xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix";
xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5
oval-definitions-schema.xsd
http://oval.mitre.org/XMLSchema/oval-definitions-5#unix
unix-definitions-schema.xsd
http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd">
  <generator>
    <oval:product_name>Enhanced SCAP Content Editor
(eSCAPe)</oval:product_name>
    <oval:product_version>1.2.2</oval:product_version>
    <oval:schema_version>5.10</oval:schema_version>
    <oval:timestamp>2016-04-13T09:46:27</oval:timestamp>
  </generator>
  <!--generated.oval.base.identifier=process58_test-->
  <definitions>
    <definition id="oval:process58_test:def:1" version="1"
class="compliance">
      <metadata>
        <title>process58_test</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux</platform>
          <platform>SUSE Linux Enterprise all versions</platform>
        </affected>
        <description>process58_test</description>
      </metadata>
      <criteria operator="AND" negate="false" comment="process58_test">
        <criterion comment="dsmc scheduler process is running"
test_ref="oval:process58_test:tst:1" negate="false" />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <process58_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix";
id="oval:process58_test:tst:1" version="1" check="all" comment="dsmc
scheduler process is running" check_existence="at_least_one_exists">
      <object object_ref="oval:process58_test:obj:1" />
    </process58_test>
  </tests>
  <objects>
    <process58_object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix";
id="oval:process58_test:obj:1" version="1" comment="dsmc scheduler process">
      <command_line datatype="string" operation="pattern match">^dsmc
schedule.*$</command_line>
      <pid datatype="int" operation="greater than">0</pid>
    </process58_object>
  </objects>
</oval_definitions>


Evaluating this leads to this output:

# oscap oval eval process58_test-oval.xml
Definition oval:process58_test:def:1: unknown
OpenSCAP Error: Probe with PID=2616 has been killed with signal 11
[sch_pipe.c:173]
Unable to close probe sd [oval_probe_ext.c:424]
Unable to receive a message from probe [oval_probe_ext.c:579]
Invalid oval result type: -1. [oval_resultTest.c:179]

_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list