Re: [Open-scap] probe_process58 (1.2.10) crashes on SLES11 SP4

[Andreas Krause]

Am 13.10.2016 um 19:42 schrieb Zbynek Moravec:
> Hi,
> 
> I am not able to reproduce it on Fedora. Same as your previous bug -
> we need more information about openscap build, you've used.

Added additional information to the other thread. Same oscap version,
same operating systems and same hardware here. The only difference is:
While probe_xinetd crashes both on SLES11 and SLES12, probe_process58
only fails on SLES11 and works on SLES12 (and RHEL systems, of course).

Regards, Andreas

___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

[Open-scap] probe_process58 (1.2.10) crashes on SLES11 SP4

[Andreas Krause]

Hello,

with openscap version 1.2.10 probe_process58 crashes on SLES11 SP4.

Minimal oval example:


http://oval.mitre.org/XMLSchema/oval-definitions-5;
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;
xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5;
xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5;
xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix;
xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5
oval-definitions-schema.xsd
http://oval.mitre.org/XMLSchema/oval-definitions-5#unix
unix-definitions-schema.xsd
http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd">
  
Enhanced SCAP Content Editor
(eSCAPe)
1.2.2
5.10
2016-04-13T09:46:27
  
  
  

  
process58_test

  Red Hat Enterprise Linux
  SUSE Linux Enterprise all versions

process58_test
  
  

  

  
  
http://oval.mitre.org/XMLSchema/oval-definitions-5#unix;
id="oval:process58_test:tst:1" version="1" check="all" comment="dsmc
scheduler process is running" check_existence="at_least_one_exists">
  

  
  
http://oval.mitre.org/XMLSchema/oval-definitions-5#unix;
id="oval:process58_test:obj:1" version="1" comment="dsmc scheduler process">
  ^dsmc
schedule.*$
  0

  



Evaluating this leads to this output:

# oscap oval eval process58_test-oval.xml
Definition oval:process58_test:def:1: unknown
OpenSCAP Error: Probe with PID=2616 has been killed with signal 11
[sch_pipe.c:173]
Unable to close probe sd [oval_probe_ext.c:424]
Unable to receive a message from probe [oval_probe_ext.c:579]
Invalid oval result type: -1. [oval_resultTest.c:179]

___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list