Comments (12)
There is a bug in glibc; please try 1.01b and let me know i this still
reproduces.
Original comment by [email protected]
on 19 Mar 2010 at 9:15
- Changed state: Fixed
from skipfish.
I'm seeing this 1.01b, but the debug build runs fine.
Here, have a heisenbug ;-)
Original comment by [email protected]
on 19 Mar 2010 at 10:02
from skipfish.
I've noticed the same behavior as henkpoley, the debug build runs just fine,
where as otherwise I get an Abort
Trap. 1.01b
Original comment by [email protected]
on 19 Mar 2010 at 10:07
from skipfish.
Can you run it under gdb, and then give me the output of the 'back' command
when it
aborts?
Original comment by [email protected]
on 19 Mar 2010 at 10:27
from skipfish.
I *believe* this may be fixed by:
http://skipfish.googlecode.com/files/skipfish-1.03b.tgz
Please let me know.
Original comment by [email protected]
on 20 Mar 2010 at 12:55
from skipfish.
Hi, I'm seeing the same issue with 1.03b. I've attached the gdb output (I
think I did this
correctly, let me know if you need more info).
Original comment by [email protected]
on 20 Mar 2010 at 1:20
from skipfish.
Looks like my gdb output didn't get attached. Here is the output:
mbp>% gdb skipfish
[~/src/skipfish]
GNU gdb 6.3.50-20050815 (Apple version gdb-1346) (Fri Sep 18 20:40:51 UTC
2009)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "x86_64-apple-darwin"...Reading symbols for shared
libraries ...... done
(gdb) run -W dictionaries/default.wl -MEU -C
"JSESSIONID=0F715A3D8EBEFD824C563FC67507FE32" -X /logoff.fi -o output/
http://localhost:8080/
Starting program: /Users/ndrake/src/skipfish/skipfish -W
dictionaries/default.wl -
MEU -C "JSESSIONID=0F715A3D8EBEFD824C563FC67507FCE2" -X /logoff.fi -o
output/ http://localhost:8080/
Reading symbols for shared libraries .+++++........ done
skipfish version 1.03b by <[email protected]>
Program received signal SIGABRT, Aborted.
0x00007fff87aa3fe6 in __kill ()
(gdb) back
#0 0x00007fff87aa3fe6 in __kill ()
#1 0x00007fff87b44dd3 in __abort ()
#2 0x00007fff87b39617 in __chk_fail ()
#3 0x00007fff87ab1970 in __memset_chk ()
#4 0x0000000100004626 in maybe_lookup_host (name=0x100110b10 "localhost")
at alloc-inl.h:70
#5 0x000000010000477b in async_request (req=0x10010ed40) at
http_client.c:1651
#6 0x000000010000fe0f in maybe_add_pivot (req=0x10010ec10, res=0x0,
via_link=2 '\002') at database.c:184
#7 0x0000000100001aa3 in main (argc=11, argv=0x7fff5fbff240) at skipfish.c:407
Original comment by [email protected]
on 20 Mar 2010 at 1:41
from skipfish.
I have the exact same problem with OS X 10.6.2, libidn 1.18, skipfish 1.03b.
The backtrace looks the same as
well.
Original comment by [email protected]
on 20 Mar 2010 at 3:23
from skipfish.
This looks exactly like a problem that should be fixed by now (a glitch in
FORTIFY_SOURCE). I have two more suggestions; please let me know if this makes
any
difference:
1) Edit Makefile, find this line:
CFLAGS_GEN = -Wall -funsigned-char -g -ggdb -U_FORTIFY_SOURCE
...and replace it with:
CFLAGS_GEN = -Wall -funsigned-char -g -ggdb -DFORTIFY_SOURCE=0
Then try 'make clean all'. Let me know if anything changes.
2) Replace the same line with:
CFLAGS_GEN = -Wall -funsigned-char -g -ggdb -D_FORTIFY_SOURCE=0
...and likewise, 'make clean all'.
If all this fails, using the scanner with 'make clean debug' and redirecting
stderr
to a file (2>logfile.txt) is the best short-term option; and I will investigate
a bit
more.
Original comment by [email protected]
on 20 Mar 2010 at 3:32
from skipfish.
Original comment by [email protected]
on 20 Mar 2010 at 3:38
- Changed state: Accepted
from skipfish.
The first change had the same issue. The second one fixed the problem.
Thanks!
Original comment by [email protected]
on 20 Mar 2010 at 3:45
from skipfish.
Sweet. 1.05 uploading now.
Original comment by [email protected]
on 20 Mar 2010 at 3:48
- Changed state: Fixed
from skipfish.
Related Issues (20)
- Skipfish -I option doesn't properly work HOT 1
- Skipfish to slow under cygwin HOT 1
- I cant get google play to open. HOT 1
- Patch for /trunk/README
- on Gmail Search button not working properely refreshes the page instead of doing search operations HOT 1
- Add ability to exclude pages by content
- Enter one-line summary
- URL for arachni has changed
- how it work? HOT 1
- Preprocessor use of USE_COLOR (config.h, debug.h) is inconsistent
- Documentation detailing how vulnerabilities are determined
- Hello HOT 1
- Getting the Authentication error even after login form has been authenticated.
- "><img src=x onerror=prompt(0)> HOT 2
- Enter one-line summary
- Use Firing Range to make sure the scanner is tested for recognition of modern vulnerabilities HOT 1
- did my husband add his email on mine so he can see everything i do? All his adresses ad to mine is there a connection spmewhere to [email protected] his email?
- ive been hackedbyyour iwn tools HOT 1
- Install Skipfish globally in Ubuntu 14.04
- Enter one-line summary
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from skipfish.