Re: mib2c for oid type cause segmentation fault, e.g. etherStatsDataSource

#1 (**permalink**) 07-26-2005

--0__=09BBFAD9DFC99F3A8f9e8a93df938690918c09BBFAD9DF C99F3A
Content-type: text/html; charset=US-ASCII
Content-Disposition: inline
Content-transfer-encoding: quoted-printable

<html><body>
Robert, 
 
I applied the patch, re-make, re-generate mib2c for etherStatsTable.<br=
>
It's still broke, but at different place "Broken pipe". Pleas=
e see the debug messages below: 
 
$ snmpwalk localhost etherStatsTable 
RMON-MIB::etherStatsIndex.1 =3D INTEGER: 1 
RMON-MIB::etherStatsIndex.2 =3D INTEGER: 2 
RMON-MIB::etherStatsDataSource.1 =3D OID: IF-MIB::ifIndex.1 
RMON-MIB::etherStatsDataSource.2 =3D OID: IF-MIB::ifIndex.1 
RMON-MIB::etherStatsDropEvents.1 =3D Counter32: 0 
Error in packet. 
Reason: (genError) A general failure occured 
Failed object: RMON-MIB::etherStatsDropEvents.1 
-----------------------------------------------------------------------=
--------------------------------------------------- 
results: RMON-MIB::etherStatsDropEvents.1 =3D Counter32: 0 
trace: netsnmp_callback_hook_build(): snmpCallbackDomain.c, 443: 
transport_callback: hook_build enter 
trace: netsnmp_callback_hook_build(): snmpCallbackDomain.c, 455: 
transport_callback: hook_build exit 
trace: netsnmp_callback_send(): snmpCallbackDomain.c, 237: 
transport_callback: hook_send enter 
trace: callback_debug_pdu(): snmpCallbackDomain.c, 91: 
dump_send_callback_transport: PDU: command =3D 162, errstat =3D 0, erri=
ndex =3D 0 
trace: callback_debug_pdu(): snmpCallbackDomain.c, 93: 
dump_send_callback_transport: var 2:RMON-MIB::etherStatsDropEvents.1 =
=3D Counter32: 0 
trace: netsnmp_callback_send(): snmpCallbackDomain.c, 318: 
transport_callback: hook_send exit 
trace: netsnmp_remove_and_free_agent_snmp_session(): snmp_agent.c, 1657=
: 
snmp_agent: REMOVE session =3D=3D 0x80b5e20 
trace: free_agent_snmp_session(): snmp_agent.c, 1270: 
snmp_agent: agent_session 0x80b5e20 released 
trace: free_agent_snmp_session(): snmp_agent.c, 1275: 
verbose:asp: asp 0x80b5e20 reqinfo 0x80ad678 freed 
trace: handle_snmp_packet(): snmp_agent.c, 1798: 
snmp_agent: end of handle_snmp_packet, asp =3D 0x80b5e20 
trace: run_alarms(): snmp_alarm.c, 250: 
snmp_alarm: run alarm 2 
trace: agentx_check_session(): mibgroup/agentx/subagent.c, 929: 
agentx/subagent: checking status of session 0x8057c18 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 611:<=
br>
dumph_send: AgentX Header 
dumpx_send: 01 0D 00 00 
 
dumpv_send: Version: 1 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 614:<=
br>
dumpv_send: Command: 13 (Ping) 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 617:<=
br>
dumpv_send: Flags: 00 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 620:<=
br>
dumph_send: Session ID 
dumpx_send: 27 00 00 00 
 
dumpv_send: Integer: 39 (0x27) 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 629:<=
br>
dumph_send: Transaction ID 
dumpx_send: 00 00 00 00 
 
dumpv_send: Integer: 0 (0x00) 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 638:<=
br>
dumph_send: Request ID 
dumpx_send: CB 44 A1 10 
 
dumpv_send: Integer: 279004363 (0x10A144CB) 
trace: agentx_realloc_build_header(): mibgroup/agentx/protocol.c, 647:<=
br>
dumph_send: Dummy Length :-( 
dumpx_send: 00 00 00 00 
 
dumpv_send: Integer: 0 (0x00) 
trace: _agentx_realloc_build(): mibgroup/agentx/protocol.c, 714: 
dumph_send: AgentX Payload 
dumpx_send:00 00 00 00 
 
dumpv_send: Integer: 0 (0x00) 
trace: _agentx_realloc_build(): mibgroup/agentx/protocol.c, 1004: 
agentx_build: packet built okay 
trace: netsnmp_unix_send(): snmpUnixDomain.c, 160: 
netsnmp_unix: send 20 bytes to 0x80bbfe0 on fd 5 
Broken pipe 
 
<img src=3D"cid:00__=3D09BBFAD9DFC99F3A8f9e8a93df@micro ware.com" width=3D=
"16" height=3D"16" alt=3D"Inactive hide details for Robert Story <rs=
tory@freesnmp.com>">Robert Story <rstory@freesnmp.com> 
 
 

<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td style=3D"background-image:url(cid:10__=3D09BBFAD=
9DFC99F3A8f9e8a93df@microware.com); background-repeat: no-repeat; " wid=
th=3D"40%">
<ul>
<ul>
<ul>
<ul>Robert Story <rstory@freesnmp.com>=
 
07/25/2005 05:55 PM
<table border=3D"1">
<tr valign=3D"top"><td width=3D"168" bgcolor=3D"#FFFFFF"><div align=3D"=
center">Please respond to 
net-snmp-coders@lists.sourceforge.net</div></td></tr>
</table>
</ul>
</ul>
</ul>
</ul>
</td><td width=3D"60%">
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:2=
0__=3D09BBFAD9DFC99F3A8f9e8a93df@microware.com" border=3D"0" height=3D"=
1" width=3D"58" alt=3D""> 
<div align=3D"right">To</div></td><td width=3D"=
100%"><img src=3D"cid:20__=3D09BBFAD9DFC99F3A8f9e8a93df@micro ware.com" =
border=3D"0" height=3D"1" width=3D"1" alt=3D""> 
Emi.Yanagi@radisys.com</td></tr>

<tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:2=
0__=3D09BBFAD9DFC99F3A8f9e8a93df@microware.com" border=3D"0" height=3D"=
1" width=3D"58" alt=3D""> 
<div align=3D"right">cc</div></td><td width=3D"=
100%"><img src=3D"cid:20__=3D09BBFAD9DFC99F3A8f9e8a93df@micro ware.com" =
border=3D"0" height=3D"1" width=3D"1" alt=3D""> 
net-snmp-coders@lists.sourceforge.net</td></tr>=

<tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:2=
0__=3D09BBFAD9DFC99F3A8f9e8a93df@microware.com" border=3D"0" height=3D"=
1" width=3D"58" alt=3D""> 
<div align=3D"right">Subject</div></td><td widt=
h=3D"100%"><img src=3D"cid:20__=3D09BBFAD9DFC99F3A8f9e8a93df@micro ware.=
com" border=3D"0" height=3D"1" width=3D"1" alt=3D""> 
Re: mib2c for oid type cause segmentation fault, e.g. =
etherStatsDataSource</td></tr>
</table>

<table border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tr valign=3D"top"><td width=3D"58"><img src=3D"cid:20__=3D09BBFAD9DFC9=
9F3A8f9e8a93df@microware.com" border=3D"0" height=3D"1" width=3D"1" alt=
=3D""></td><td width=3D"336"><img src=3D"cid:20__=3D09BBFAD9DFC99F3A8f9=
e8a93df@microware.com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><=
/td></tr>
</table>
</td></tr>
</table>
 
<tt>On Fri, 22 Jul 2005 13:21:46 -0500 Emi.Yanagi@radisys.com wrote:<br=
>
 
Not to non-zero, but something greater than 10. 
 
I don't know how I haven't run across this in my testing, but I did tra=
ck it 
down. The length in the get function is supposed to be in bytes, and th=
e 
memcpy does take that into account. However, the size check at the top =
of the 
function does not, thus the memcpy is overwriting the buffer. This will=
only 
happen for objects that exceed the default buffer size (40 bytes). 
 
Here is a patch that should fix this. Let me know if you still have pro=
blems... 
 
</tt><tt><a href=3D"http://sourceforge.net/tracker/index.php?func=3Ddet=
ail&aid=3D1244838&group_id=3D12694&atid=3D456380">http://sourceforge.ne=
t/tracker/index.php?func=3Ddetail&aid=3D1244838&grou p_id=3D1269=
4&atid=3D456380</a></tt><tt> 
 
-- 
NOTE: messages sent directly to me, instead of the lists, will be delet=
ed 
     unless they are requests for paid consulting servi=
ces. 
 
Robert Story; NET-SNMP Junkie 
Support: <</tt><tt><a href=3D"http://www.net-snmp.org/">http://www.n=
et-snmp.org/</a></tt><tt>> <irc://irc.freenode.net/#net-snmp><=
br>
Archive: <</tt><tt><a href=3D"http://sourceforge.net/mailarchive/for=
um.php?forum=3Dnet-snmp-coders">http://sourceforge.net/mailarchive/foru=
m.php?forum=3Dnet-snmp-coders</a></tt><tt>> 
 
You are lost in a twisty maze of little standards, all different. 
</tt> 
</body></html>=

--0__=09BBFAD9DFC99F3A8f9e8a93df938690918c09BBFAD9DF C99F3A
Content-type: image/gif;
name="graycol.gif"
Content-Disposition: inline; filename="graycol.gif"
Content-ID: <00__=09BBFAD9DFC99F3A8f9e8a93df@microware.com>
Content-transfer-encoding: base64

R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu
ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYX J0U2F2ZXIhAAA7

--0__=09BBFAD9DFC99F3A8f9e8a93df938690918c09BBFAD9DF C99F3A
Content-type: image/gif;
name="pic01572.gif"
Content-Disposition: inline; filename="pic01572.gif"
Content-ID: <10__=09BBFAD9DFC99F3A8f9e8a93df@microware.com>
Content-transfer-encoding: base64

R0lGODlhWABDALP/AAAAAK04Qf79/o+Gm7WuwlNObwoJFCsoSMDAwGFsmIuezf///wAAAAAAAAAA
AAAAACH5BAEAAAgALAAAAABYAEMAQAT/EMlJq704682770RiFMRinqggEUNSHIchG0BCfHhOjAuh
EDeUqTASLCbBhQrhG7xis2j0lssNDopE4jfIJhDaggI8YB1sZe ZgLVA9YVCpnGagVjV171aRVrYR
RghXcAGFhoUETwYxcXNyADJ3GlcSKGAwLwllVC1vjIUHBWsFil KQdI8GA5IcpApeJQt8L09lmgkH
LZikoU5wjqcyAMMFrJIDPAKvCFletKSev1HBw8KrxtjZ2tvc3d 5VyKtCKW3jfz4uMKmq3xu4N0nK
BVoJQmx2LGVOmrqNjjJf2hHAQo/eDwJGTKhQMcgQEEAnEjFS98+RnW3smGkZU6ncCWav/4wYOnAI
TihRL/4FEwbp28BXMMcoscQCVxlepL4IGDSCyJyVQOu0o7CjmLN50OZl qWmyFy5/6yBBuji0AxFR
M00oQAqNIstqI6qKHUsWRAEAvagsmfUEAImyxgbmUpJk3IklNU tJOUAVLoUr1+wqDGTE4zk+T6FG
uQb3SizBCwatiiUgCBN8vrz+zFjVyQ8FWkOlg4NQiZMB5QS8QO 3mpOaKnL0Z2EKvNMSILEThKhCg
zMKPVxYJh23qm9KNW7pArPynMqZDiErsTMqI+LRi3QAgkFUbXp uFKhSYZALd0O5RKa2z9EYKBbpb
qxIKsjUPRgD7I2XYV6wyrOw92ykExP8NW4URhknC5dKGE4v4NE NQj2jXjmfNgOZDaXb5glRmXQ33
YEWQYNcZFnrYcIQLNzyTFDQNkXIff0ExVlY4srziQk43inZgL4 rwxxINMvpFFAz1KOODHiu+4aEw
NEjFl5B3JIKWKF3k6I9bfUGp5ZZcdunll5IA4cuHvQQJ5gcsoC WOOUwgltIwAKRxJgbIkJAQZEq0
2YliZnpZZ4BH3CnYOXldOUOfQoYDqF1LFHbXCrO8xmRsfoXDXJ 6ChjCAH3QlhJcT6VWE6FCkfCco
CgrMFsROrIEX3o2whVjWDjoJccN3LdggSGXLCdLEgHr1lyU3O3 QxhgohNKXJCWv8JQr/PDdaqd6w
2rj1inLiGeiCJoDspAoQlYE6QWLSECehcWIYxIQES6zhbn1iIm THEQyqJ4eIxJJoUBc+3CbBuwZE
V5cJPPkIjFDdeEabQbd6WgICTxiiz0f5dBKquXF6k4senwEhYG nKEFJeGrxUZy8dB8gmAXI/sPvH
ESfCwVt5hTgYiqQqtdRNHQIU1PJ33ZqmzgE90OwLaoJcnMop1W iMmgkPHQRIrwgFuNV90A3doNKT
mrKIN07AnGcI9BQjhCBN4RfA1qIZnMqorJCogKfGQnxSCDilTV IA0yl5ciTovgLuBDKFUDE9aQcw
9SA+rjSNf9/M1gxrj6VwDTS0IUSElMzBfsj0NFXR2kwsV1A5IF1grLgLL/r1R40BZEnuBWgmQEyb
jqRwSAt6bqMCOFkvKFN2GPPkUzIm/SCF8z8pVzpbjVnMsy0vOr1hw3SaSRUhpY09v0z0J1FnwzPl
fmh+xl4WtR0zGu24I4KbMQm3lnVu2oNWxI9W/lcyzA+mCKF4DBikxb/+UWtOGRiFP8qEwAayIgIA
Ow==

--0__=09BBFAD9DFC99F3A8f9e8a93df938690918c09BBFAD9DF C99F3A
Content-type: image/gif;
name="ecblank.gif"
Content-Disposition: inline; filename="ecblank.gif"
Content-ID: <20__=09BBFAD9DFC99F3A8f9e8a93df@microware.com>
Content-transfer-encoding: base64

R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7

--0__=09BBFAD9DFC99F3A8f9e8a93df938690918c09BBFAD9DF C99F3A--

-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/...et-snmp-coders

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode