Bug 155955

Summary:	net-analyzer/snortsam segfaults with ciscoacl plugin
Product:	Gentoo Linux	Reporter:	Paul Kehrer <paul>
Component:	Current packages	Assignee:	Gentoo Netmon project <netmon>
Status:	RESOLVED FIXED
Severity:	major	CC:	major
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Fixed code provided by Ali Basel on the snortsam mailing list Fixed header provided by Ali Basel on the snortsam mailing list

Description Paul Kehrer 2006-11-22 09:24:17 UTC

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.9 (KHTML, like Gecko) Safari/419.3
Build Identifier: 

When compiling with gcc 4.1.1 snortsam segfaults when you attempt to load the ciscoacl plugin.  

Reproducible: Always

Steps to Reproduce:
1. Compile snortsam with gcc 4.1.1
2. Edit snortsam.conf to add a line like "ciscoacl 10.10.10.10 password enablepass /etc/ciscoacl.conf"
3. Start snortsam.

Actual Results:  
Seg fault!

Expected Results:  
Worked ;)

Comment 1 Paul Kehrer 2006-11-22 09:25:35 UTC

Created attachment 102557 [details]
Fixed code provided by Ali Basel on the snortsam mailing list

Comment 2 Paul Kehrer 2006-11-22 09:26:02 UTC

Created attachment 102558 [details]
Fixed header provided by Ali Basel on the snortsam mailing list

Comment 3 Paul Kehrer 2006-11-22 09:29:22 UTC

Sorry about the lack of a patch!  To elaborate a bit on the above, this bug occurs in snortsam 2.30 and 2.50, but the new ciscoacl code attached above should work as a fix for both versions (since 2.50 is still masked).

Comment 4 Marcelo Goes (RETIRED) gentoo-dev

2006-12-09 08:03:50 UTC

Thanks, I patched up 2.50-r1 in cvs.
Cheers!