FWIW: I get the same on nfacctd 0.14.3 (20130503-00)

On Wed, Dec 4, 2013 at 4:18 PM, Joel Krauska <j...@krauska.net> wrote:

> I get a pretty repeatable buffer overflow when trying to use nfacctd with
> BGP enabled.
> (threaded)
>
> It will run for a few moments and then bombs out.
>
> *** buffer overflow detected ***: nfacctd: Core Process [default]
> terminated
> ======= Backtrace: =========
> /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f56d4dd1f47]
> /lib/x86_64-linux-gnu/libc.so.6(+0x109e40)[0x7f56d4dd0e40]
> nfacctd: Core Process [default](bgp_nlri_parse+0x15f)[0x46b17f]
> nfacctd: Core Process [default](bgp_update_msg+0x3a7)[0x46bb87]
> nfacctd: Core Process [default](skinny_bgp_daemon+0xc1f)[0x46e84f]
> nfacctd: Core Process [default](thread_runner+0x5b)[0x45f72b]
> /lib/x86_64-linux-gnu/libpthread.so.0(+0x7e9a)[0x7f56d508ee9a]
> /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f56d4dbb3fd]
>
> ======= Memory map: ========
> 00400000-004ca000 r-xp 00000000 fd:01 270072
> /opt/pmacct/sbin/nfacctd
> 006c9000-006ca000 r--p 000c9000 fd:01 270072
> /opt/pmacct/sbin/nfacctd
> 006ca000-006cb000 rw-p 000ca000 fd:01 270072
> /opt/pmacct/sbin/nfacctd
> 006cb000-0074c000 rw-p 00000000 00:00 0
> 00ab9000-00ada000 rw-p 00000000 00:00 0
>  [heap]
> 7f56c4000000-7f56c6e8c000 rw-p 00000000 00:00 0
> 7f56c6e8c000-7f56c8000000 ---p 00000000 00:00 0
> 7f56cbde2000-7f56cbdf7000 r-xp 00000000 fd:01 390697
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f56cbdf7000-7f56cbff6000 ---p 00015000 fd:01 390697
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f56cbff6000-7f56cbff7000 r--p 00014000 fd:01 390697
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f56cbff7000-7f56cbff8000 rw-p 00015000 fd:01 390697
> /lib/x86_64-linux-gnu/libgcc_s.so.1
> 7f56cbfff000-7f56cc000000 rw-p 00000000 00:00 0
> 7f56cc000000-7f56d0000000 rw-p 00000000 00:00 0
> 7f56d3a00000-7f56d3fb3000 rw-s 00000000 00:04 10398639
> /dev/zero (deleted)
> 7f56d3fb3000-7f56d3fb4000 ---p 00000000 00:00 0
> 7f56d3fb4000-7f56d47b4000 rw-p 00000000 00:00 0
> 7f56d47b4000-7f56d48af000 r-xp 00000000 fd:01 394152
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f56d48af000-7f56d4aae000 ---p 000fb000 fd:01 394152
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f56d4aae000-7f56d4aaf000 r--p 000fa000 fd:01 394152
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f56d4aaf000-7f56d4ab0000 rw-p 000fb000 fd:01 394152
> /lib/x86_64-linux-gnu/libm-2.15.so
> 7f56d4ab0000-7f56d4ac6000 r-xp 00000000 fd:01 390743
> /lib/x86_64-linux-gnu/libz.so.1.2.3.4
> 7f56d4ac6000-7f56d4cc5000 ---p 00016000 fd:01 390743
> /lib/x86_64-linux-gnu/libz.so.1.2.3.4
> 7f56d4cc5000-7f56d4cc6000 r--p 00015000 fd:01 390743
> /lib/x86_64-linux-gnu/libz.so.1.2.3.4
> 7f56d4cc6000-7f56d4cc7000 rw-p 00016000 fd:01 390743
> /lib/x86_64-linux-gnu/libz.so.1.2.3.4
> 7f56d4cc7000-7f56d4e7c000 r-xp 00000000 fd:01 394141
> /lib/x86_64-linux-gnu/libc-2.15.so
> 7f56d4e7c000-7f56d507c000 ---p 001b5000 fd:01 394141
> /lib/x86_64-linux-gnu/libc-2.15.so
> 7f56d507c000-7f56d5080000 r--p 001b5000 fd:01 394141
> /lib/x86_64-linux-gnu/libc-2.15.so
> 7f56d5080000-7f56d5082000 rw-p 001b9000 fd:01 394141
> /lib/x86_64-linux-gnu/libc-2.15.so
> 7f56d5082000-7f56d5087000 rw-p 00000000 00:00 0
> 7f56d5087000-7f56d509f000 r-xp 00000000 fd:01 394150
> /lib/x86_64-linux-gnu/libpthread-2.15.so
> 7f56d509f000-7f56d529e000 ---p 00018000 fd:01 394150
> /lib/x86_64-linux-gnu/libpthread-2.15.so
> 7f56d529e000-7f56d529f000 r--p 00017000 fd:01 394150
> /lib/x86_64-linux-gnu/libpthread-2.15.so
> 7f56d529f000-7f56d52a0000 rw-p 00018000 fd:01 394150
> /lib/x86_64-linux-gnu/libpthread-2.15.so
> 7f56d52a0000-7f56d52a4000 rw-p 00000000 00:00 0
> 7f56d52a4000-7f56d52a6000 r-xp 00000000 fd:01 394156
> /lib/x86_64-linux-gnu/libdl-2.15.so
> 7f56d52a6000-7f56d54a6000 ---p 00002000 fd:01 394156
> /lib/x86_64-linux-gnu/libdl-2.15.so
> 7f56d54a6000-7f56d54a7000 r--p 00002000 fd:01 394156
> /lib/x86_64-linux-gnu/libdl-2.15.so
> 7f56d54a7000-7f56d54a8000 rw-p 00003000 fd:01 394156
> /lib/x86_64-linux-gnu/libdl-2.15.so
> 7f56d54a8000-7f56d54db000 r-xp 00000000 fd:01 131070
> /usr/lib/libGeoIP.so.1.4.8
> 7f56d54db000-7f56d56da000 ---p 00033000 fd:01 131070
> /usr/lib/libGeoIP.so.1.4.8
> 7f56d56da000-7f56d56db000 r--p 00032000 fd:01 131070
> /usr/lib/libGeoIP.so.1.4.8
> 7f56d56db000-7f56d56dd000 rw-p 00033000 fd:01 131070
> /usr/lib/libGeoIP.so.1.4.8
> 7f56d56dd000-7f56d5711000 r-xp 00000000 fd:01 135098
> /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1
> 7f56d5711000-7f56d5911000 ---p 00034000 fd:01 135098
> /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1
> 7f56d5911000-7f56d5912000 r--p 00034000 fd:01 135098
> /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1
> 7f56d5912000-7f56d5913000 rw-p 00035000 fd:01 135098
> /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1
> 7f56d5913000-7f56d5914000 rw-p 00000000 00:00 0
> 7f56d5914000-7f56d5bd2000 r-xp 00000000 fd:01 130807
> /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0
> 7f56d5bd2000-7f56d5dd1000 ---p 002be000 fd:01 130807
> /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0
> 7f56d5dd1000-7f56d5dd7000 r--p 002bd000 fd:01 130807
> /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0
> 7f56d5dd7000-7f56d5e55000 rw-p 002c3000 fd:01 130807
> /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0
> 7f56d5e55000-7f56d5e5a000 rw-p 00000000 00:00 0
> 7f56d5e5a000-7f56d5e7c000 r-xp 00000000 fd:01 394153
> /lib/x86_64-linux-gnu/ld-2.15.so
> 7f56d602d000-7f56d6073000 rw-p 00000000 00:00 0
> 7f56d6074000-7f56d6075000 rw-s 00000000 00:04 10398640
> /dev/zero (deleted)
> 7f56d6075000-7f56d6079000 rw-s 00000000 00:04 10398636
> /dev/zero (deleted)
> 7f56d6079000-7f56d607c000 rw-p 00000000 00:00 0
> 7f56d607c000-7f56d607d000 r--p 00022000 fd:01 394153
> /lib/x86_64-linux-gnu/ld-2.15.so
> 7f56d607d000-7f56d607f000 rw-p 00023000 fd:01 394153
> /lib/x86_64-linux-gnu/ld-2.15.so
> 7fff3a0b9000-7fff3a0da000 rw-p 00000000 00:00 0
>  [stack]
> 7fff3a0e8000-7fff3a0e9000 r-xp 00000000 00:00 0
>  [vdso]
> ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
>  [vsyscall]
> ERROR ( testing/print ): Core process *seems* gone. Exiting.
>
> It seems to occur shortly after the peer comes up.
> (WARNS filtered out due to warns)
>
> #/opt/pmacct/sbin/nfacctd  -f /etc/pmacct/nfacctd.conf | grep -v WARN
> INFO ( default/core/BGP ): maximum BGP peers allowed: 2
> INFO ( default/core/BGP ): waiting for BGP data on 0.0.0.0:179
> INFO ( default/core ): waiting for NetFlow data on 0.0.0.0:6001
> INFO ( default/core/BGP ): BGP peers usage: 1/2
>
>
> Is there anything else I can provide to help debug?
> Corefile?
>
>
>
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to