Anonymous | Login | 2024-05-06 01:16 CEST |
Main | My View | View Issues |
Viewing Issue Simple Details [ Jump to Notes ] | [ View Advanced ] [ Issue History ] [ Print ] | ||||||
ID | Category | Severity | Reproducibility | Date Submitted | Last Update | ||
0001205 | [netsnmp] regular use | crash | always | 2005-10-05 08:05 | 2009-12-25 21:08 | ||
Reporter | PaulBoven | View Status | public | ||||
Assigned To | hson | ||||||
Priority | normal | Resolution | fixed | ||||
Status | closed | ||||||
Summary | 0001205: snmpd crashes | ||||||
Description |
To reproduce: 1. Create a minimal snmpd.conf in /opt/csw/etc/snmp/snmpd.conf, containing e.g. -- rocommunity public localhost master yes syslocaltion Somewhere sysservices 76 -- /opt/csw/sbin/snmpd /opt/csw/bin/snmpwalk -c public localhost <lots of MIB output>, but incomplete, then stops and snmpwalk reports a timeout. snmpd crashes with a SIGSEGV somewhere during the snmpwalk and is gone. |
||||||
Additional Information |
Stack backtrace: ff3a0614 memcpy (0, ffbfeba0, 74, 2, 7800, ffbfec14) + 134 ff281694 var_ipRouteEntry (ffbfef64, c02d0, c02c0, 0, ffbfeba2, fffffffe) + 1fc ff33c6f0 netsnmp_old_api_helper (1, 4c5f0, f0a10, e8068, 8, ffbfef64) + 10c ff376aa0 netsnmp_call_handler (c00, 4c5f0, f0a10, e8068, 4b1d0, ff38ebf4) + 150 ff376aa0 netsnmp_call_handler (c00, 4c5f0, f0a10, e8068, 4b1f0, ff38ebf4) + 150 ff36c764 handle_var_requests (0, bff28, f0a10, 0, 0, 40) + 50 ff36d5a4 handle_getnext_loop (bff28, 400, 1ec48, 0, ff38bfd0, ff379588) + 228 ff36dbc8 netsnmp_handle_request (bff28, 0, 1e5fc, ff3714e4, ff38bfd0, 0) + 1fc ff36b4b8 handle_snmp_packet (1, bff78, 20c54, bfe90, bff28, 1) + 15c ff15181c ???????? (f5720, bff78, d0420, d2f00, f5768, bfe90) ff1529bc _sess_read (f5720, ffbff6dc, 10000, f8b68, 0, 0) + fb0 ff152bfc snmp_sess_read (f5720, ffbff6dc, 1, 66200, 0, 40) + 20 ff1519dc snmp_read (ffbff6dc, 88e8, 67438, ffffffff, ff1b8de8, 8800) + 38 00013bf8 ???????? (ffbff770, ffbff768, 0, f4240, 0, 26918) 00013328 main (2, 3, 15000, 11c00, 26930, 15000) + 1208 00011bd8 _start (0, 0, 0, 0, 0, 0) + 108 Tested on Solaris 9 Sunblade 1000. |
||||||
Tags | No tags attached. | ||||||
Attached Files | |||||||
|
Notes | |
(0002780) charlie (reporter) 2005-12-29 04:21 |
Same here on Solaris 10: SunOS tomcat01 5.10 Generic_118822-11 sun4u sparc SUNW,UltraSPARC-IIi-cEngine root@tomcat01:~# pkginfo -l CSWnetsnmp PKGINST: CSWnetsnmp NAME: netsnmp - lib and tools for SNMP usage CATEGORY: system ARCH: sparc VERSION: 5.1 VENDOR: http://net-snmp.sourceforge.net/ [^] packaged for CSW by Philip Brown PSTAMP: apollo20040117154556 INSTDATE: Nov 03 2005 16:13 HOTLINE: http://www.blastwave.org/bugtrack/ [^] EMAIL: phil@bolthole.com STATUS: completely installed FILES: 395 installed pathnames 10 shared pathnames 21 directories 37 executables 15064 blocks used (approx) root@tomcat01:~# dies after snmpwalkling it at: IP-MIB::ipAdEntBcastAddr.127.0.0.1 = INTEGER: 0 IP-MIB::ipAdEntBcastAddr.172.27.0.101 = INTEGER: 1 IP-MIB::ipAdEntBcastAddr.193.154.180.106 = INTEGER: 1 truss shows following: brk(0x0011E918) = 0 brk(0x00124918) = 0 putmsg(14, 0xFFBF4A14, 0x00000000, 0) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 getmsg(14, 0xFFBF4A14, 0x00000000, 0xFFBF4A10) = 2 getmsg(14, 0x00000000, 0xFFBF4A14, 0xFFBF4A10) = 0 ioctl(14, I_FLUSH, FLUSHRW) = 0 Incurred fault 0000006, FLTBOUNDS %pc = 0xFEC2DC40 siginfo: SIGSEGV SEGV_MAPERR addr=0x00126000 Received signal 0000011, SIGSEGV [default] siginfo: SIGSEGV SEGV_MAPERR addr=0x00126000 root@tomcat01:/opt/csw# HTH |
(0002796) phil (reporter) 2006-01-02 16:42 |
Dont really know what to do here.. I just package it :-/ Suggestions requested. |
(0007136) hson (developer) 2009-12-25 21:08 |
Fixed in 5.4.2.1,REV=2009.12.24 |
Copyright © 2000 - 2008 Mantis Group |