Thanks to visit codestin.com
Credit goes to github.com

Skip to content

ndpiReader crash while analyzing Server Hello  #366

@Ravi-t

Description

@Ravi-t

ndpiReader crashed on encountering Server Hello packet, I have attached the coredump and trace file.
The bt is as follows:

gdb ndpiReader corelive.57873
GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-80.el7
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /root/nDPI-8/nDPI/example/ndpiReader...done.
[New LWP 57874]
[New LWP 57873]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `./ndpiReader -i eno16777736'.
Program terminated with signal 11, Segmentation fault.
#0 ssl_mark_and_payload_search_for_other_protocols (ndpi_struct=0x21942b0, flow=0x7fc5a4071c00) at protocols/ssl.c:381
381 if(packet->payload[a] == 't') {
(gdb) p a
$1 = 2458
(gdb) bt
#0 ssl_mark_and_payload_search_for_other_protocols (ndpi_struct=0x21942b0, flow=0x7fc5a4071c00) at protocols/ssl.c:381
#1 0x0000000000412456 in check_ndpi_tcp_flow_func (ndpi_struct=ndpi_struct@entry=0x21942b0, flow=flow@entry=0x7fc5a4071c00,
ndpi_selection_packet=ndpi_selection_packet@entry=0x7fc5ac4068d8) at ndpi_main.c:3274
#2 0x000000000041247f in check_ndpi_flow_func (ndpi_struct=ndpi_struct@entry=0x21942b0, flow=flow@entry=0x7fc5a4071c00,
ndpi_selection_packet=ndpi_selection_packet@entry=0x7fc5ac4068d8) at ndpi_main.c:3332
#3 0x000000000041278e in ndpi_detection_process_packet (ndpi_struct=0x21942b0, flow=0x7fc5a4071c00, packet=, packetlen=, current_tick_l=,
src=0x7fc5a404ff20, dst=0x7fc5a4060f00) at ndpi_main.c:3515
#4 0x0000000000406b1a in packet_processing (workflow=0x24177e0, time=1492621588791, vlan_id=0, iph=0x7fc5a407863e, iph6=0x0, ip_offset=14, ipsize=2960, rawsize=2974)
at ndpi_util.c:556
#5 0x0000000000407774 in ndpi_workflow_process_packet (workflow=0x24177e0, header=0x7fc5ac406bb0, packet=0x7fc5a4078630 "") at ndpi_util.c:913
#6 0x0000000000404825 in pcap_packet_callback_checked (args=0x7fc5ac406ccc "", header=0x7fc5ac406bb0, packet=0x7fc5ac5a5046 <Address 0x7fc5ac5a5046 out of bounds>)
at ndpiReader.c:1343
#7 0x00007fc5acc7599e in pcap_handle_packet_mmap (handle=handle@entry=0x2191070, callback=callback@entry=0x4047a2 <pcap_packet_callback_checked>, user=user@entry=0x7fc5ac406ccc "",
frame=frame@entry=0x7fc5ac5a5000 <Address 0x7fc5ac5a5000 out of bounds>, tp_len=, tp_mac=, tp_snaplen=1546, tp_sec=1492621588, tp_usec=791473,
tp_vlan_tci_valid=0, tp_vlan_tci=0) at ./pcap-linux.c:4361
#8 0x00007fc5acc79ae1 in pcap_read_linux_mmap_v2 (handle=0x2191070, max_packets=-1, callback=0x4047a2 <pcap_packet_callback_checked>, user=0x7fc5ac406ccc "") at ./pcap-linux.c:4463
#9 0x00007fc5acc7e19d in pcap_loop (p=0x2191070, cnt=-1, callback=0x4047a2 <pcap_packet_callback_checked>, user=0x7fc5ac406ccc "") at ./pcap.c:862
#10 0x0000000000404e68 in runPcapLoop (thread_id=0) at ndpiReader.c:1424
#11 0x0000000000404fbc in processing_thread (_thread_id=0x0) at ndpiReader.c:1452
#12 0x00007fc5aca58dc5 in start_thread (arg=0x7fc5ac407700) at pthread_create.c:308
#13 0x00007fc5ac78628d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

Regards,
Ravi
crash.zip

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions