Bug 155955 – net-analyzer/snortsam segfaults with ciscoacl plugin

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Paul Kehrer 2006-11-22 09:24:17 UTC]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.9 (KHTML, like Gecko) Safari/419.3
Build Identifier: 

When compiling with gcc 4.1.1 snortsam segfaults when you attempt to load the ciscoacl plugin.  

Reproducible: Always

Steps to Reproduce:
1. Compile snortsam with gcc 4.1.1
2. Edit snortsam.conf to add a line like "ciscoacl 10.10.10.10 password enablepass /etc/ciscoacl.conf"
3. Start snortsam.

Actual Results:  
Seg fault!

Expected Results:  
Worked ;)

[Comment 1 Paul Kehrer 2006-11-22 09:25:35 UTC]

Created attachment 102557 [details]
Fixed code provided by Ali Basel on the snortsam mailing list

[Comment 2 Paul Kehrer 2006-11-22 09:26:02 UTC]

Created attachment 102558 [details]
Fixed header provided by Ali Basel on the snortsam mailing list

[Comment 3 Paul Kehrer 2006-11-22 09:29:22 UTC]

Sorry about the lack of a patch!  To elaborate a bit on the above, this bug occurs in snortsam 2.30 and 2.50, but the new ciscoacl code attached above should work as a fix for both versions (since 2.50 is still masked).

[Comment 4 Marcelo Goes (RETIRED) 2006-12-09 08:03:50 UTC]

Thanks, I patched up 2.50-r1 in cvs.
Cheers!