0.8.7 Spine Buffer Overflow

Post support questions that directly relate to Linux/Unix operating systems.

Moderators: Developers, Moderators

Suzumushi
Posts: 8
Joined: Thu May 12, 2005 9:14 am

Post by Suzumushi »

Hello,
spine is crashig also on fres debian install (amd64 arch)

here is log

01/03/2008 10:53:44 AM - SPINE: Poller[0] DEBUG: SQL:'INSERT INTO poller_output (local_data_id, rrd_name, time, output) VALUES (1276,'cpu','2008-01-03 10:53:44','U'),(1277,'cpu','2008-01-03 10:53:44','U'),(1278,'cpu','2008-01-03 10:53:44','U'),(1279,'cpu','2008-01-03 10:53:44','U')'
01/03/2008 10:53:44 AM - SPINE: Poller[0] Host[0] DEBUG: HOST COMPLETE: About to Exit Host Polling Thread Function
01/03/2008 10:53:44 AM - SPINE: Poller[0] DEBUG: The Value of Active Threads is 0
01/03/2008 10:53:44 AM - SPINE: Poller[0] DEBUG: In Poller, About to Start Polling of Host
01/03/2008 10:53:44 AM - SPINE: Poller[0] DEBUG: Valid Thread to be Created
01/03/2008 10:53:44 AM - SPINE: Poller[0] DEBUG: The Value of Active Threads is 1
01/03/2008 10:53:44 AM - SPINE: Poller[0] DEBUG: SQL:'SELECT id, hostname, snmp_community, snmp_version, snmp_username, snmp_password, snmp_auth_protocol, snmp_priv_passphrase, snmp_priv_protocol, snmp_context, snmp_port, snmp_timeout, max_oids, availability_method, ping_method, ping_port, ping_timeout, ping_retries, status, status_event_count, status_fail_date, status_rec_date, status_last_error, min_time, max_time, cur_time, avg_time, total_polls, failed_polls, availability FROM host WHERE id=1'
*** glibc detected *** ./spine: free(): invalid next size (fast): 0x00000000006e5040 ***
======= Backtrace: =========
/lib/libc.so.6[0x2b04186fbfca]
/lib/libc.so.6(cfree+0x8c)[0x2b04186ffb5c]
./spine[0x40b87a]
./spine[0x40bd75]
./spine[0x408f8c]
./spine[0x409b33]
/lib/libpthread.so.0[0x2b0417fd93f7]
/lib/libc.so.6(clone+0x6d)[0x2b041875f91d]
======= Memory map: ========
00400000-00412000 r-xp 00000000 08:03 297191 /usr/src/php-5.2.5/cacti-spine-0.8.7a/spine
00611000-00612000 rw-p 00011000 08:03 297191 /usr/src/php-5.2.5/cacti-spine-0.8.7a/spine
00612000-00737000 rw-p 00612000 00:00 0 [heap]
40000000-40001000 ---p 40000000 00:00 0
40001000-40801000 rw-p 40001000 00:00 0
2aaaaaaaf000-2aaaaaabc000 r-xp 00000000 08:02 270914 /lib/libgcc_s.so.1
2aaaaaabc000-2aaaaacbc000 ---p 0000d000 08:02 270914 /lib/libgcc_s.so.1
2aaaaacbc000-2aaaaacbd000 rw-p 0000d000 08:02 270914 /lib/libgcc_s.so.1
2b0417139000-2b0417156000 r-xp 00000000 08:02 272428 /lib/ld-2.7.so
2b0417156000-2b041715b000 rw-p 2b0417156000 00:00 0
2b041715b000-2b04171b0000 r--p 00000000 08:03 147277 /usr/lib/locale/locale-archive
2b0417355000-2b0417357000 rw-p 0001c000 08:02 272428 /lib/ld-2.7.so
2b0417357000-2b04173e9000 r-xp 00000000 08:03 147442 /usr/lib/libnetsnmp.so.15.1.0
2b04173e9000-2b04175e9000 ---p 00092000 08:03 147442 /usr/lib/libnetsnmp.so.15.1.0
2b04175e9000-2b04175ed000 rw-p 00092000 08:03 147442 /usr/lib/libnetsnmp.so.15.1.0
2b04175ed000-2b0417621000 rw-p 2b04175ed000 00:00 0
2b0417621000-2b04177e2000 r-xp 00000000 08:03 147266 /usr/lib/libmysqlclient_r.so.15.0.0
2b04177e2000-2b04179e1000 ---p 001c1000 08:03 147266 /usr/lib/libmysqlclient_r.so.15.0.0
2b04179e1000-2b0417a2d000 rw-p 001c0000 08:03 147266 /usr/lib/libmysqlclient_r.so.15.0.0
2b0417a2d000-2b0417a2e000 rw-p 2b0417a2d000 00:00 0
2b0417a2e000-2b0417b92000 r-xp 00000000 08:03 146597 /usr/lib/libcrypto.so.0.9.8
2b0417b92000-2b0417d91000 ---p 00164000 08:03 146597 /usr/lib/libcrypto.so.0.9.8
2b0417d91000-2b0417db8000 rw-p 00163000 08:03 146597 /usr/lib/libcrypto.so.0.9.8
2b0417db8000-2b0417dbc000 rw-p 2b0417db8000 00:00 0
2b0417dbc000-2b0417dd2000 r-xp 00000000 08:03 146894 /usr/lib/libz.so.1.2.3.3
2b0417dd2000-2b0417fd2000 ---p 00016000 08:03 146894 /usr/lib/libz.so.1.2.3.3
2b0417fd2000-2b0417fd3000 rw-p 00016000 08:03 146894 /usr/lib/libz.so.1.2.3.3
2b0417fd3000-2b0417fe9000 r-xp 00000000 08:02 272419 /lib/libpthread-2.7.so
2b0417fe9000-2b04181e8000 ---p 00016000 08:02 272419 /lib/libpthread-2.7.so
2b04181e8000-2b04181ea000 rw-p 00015000 08:02 272419 /lib/libpthread-2.7.so
2b04181ea000-2b04181ee000 rw-p 2b04181ea000 00:00 0
2b04181ee000-2b041826e000 r-xp 00000000 08:02 272420 /lib/libm-2.7.so
2b041826e000-2b041846d000 ---p 00080000 08:02 272420 /lib/libm-2.7.so
2b041846d000-2b041846f000 rw-p 0007f000 08:02 272420 /lib/libm-2.7.so
2b041846f000-2b0418470000 rw-p 2b041846f000 00:00 0
2b0418470000-2b0418485000 r-xp 00000000 08:02 272415 /lib/libnsl-2.7.so
2b0418485000-2b0418684000 ---p 00015000 08:02 272415 /lib/libnsl-2.7.so
2b0418684000-2b0418686000 rw-p 00014000 08:02 272415 /lib/libnsl-2.7.so
2b0418686000-2b0418688000 rw-p 2b0418686000 00:00 0
2b0418688000-2b04187dc000 r-xp 00000000 08:02 272404 /lib/libc-2.7.so
2b04187dc000-2b04189dc000 ---p 00154000 08:02 272404 /lib/libc-2.7.so
2b04189dc000-2b04189df000 r--p 00154000 08:02 272404 /lib/libc-2.7.so
2b04189df000-2b04189e1000 rw-p 00157000 08:02 272404 /lib/libc-2.7.so
2b04189e1000-2b04189e6000 rw-p 2b04189e1000 00:00 0
2b04189e6000-2b04189ef000 r-xp 00000000 08:02 272427 /lib/libcrypt-2.7.so
2b04189ef000-2b0418bee000 ---p 00009000 08:02 272427 /lib/libcrypt-2.7.so
2b0418bee000-2b0418bf0000 rw-p 00008000 08:02 272427 /lib/libcrypt-2.7.so
2b0418bf0000-2b0418c1f000 rw-p 2b0418bf0000 00:00 0
2b0418c1f000-2b0418c21000 r-xp 00000000 08:02 272414 /lib/libdl-2.7.so
2b0418c21000-2b0418e21000 ---p 00002000 08:02 272414 /lib/libdl-2.7.so
2b0418e21000-2b0418e23000 rw-p 00002000 08:02 272414 /lib/libdl-2.7.so
2b0418e23000-2b0418e25000 rw-p 2b0418e23000 00:00 0
2b0418e25000-2b0418e2f000 r-xp 00000000 08:02 272421 /lib/libnss_files-2.7.so
2b0418e2f000-2b041902e000 ---p 0000a000 08:02 272421 /lib/libnss_files-2.7.so
2b041902e000-2b0419030000 rw-p 00009000 08:02 272421 /lib/libnss_files-2.7.so
7fff9395c000-7fff93971000 rw-p 7ffffffea000 00:00 0 [stack]
7fff939fe000-7fff93a00000 r-xp 7fff939fe000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
Aborted
mdr:/usr/src/php-5.2.5/cacti-spine-0.8.7a# gdb spine
GNU gdb 6.6.90.20070912-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) break *0x40b87a
Breakpoint 1 at 0x40b87a: file ping.c, line 393.
(gdb) break *0x40bd75
Breakpoint 2 at 0x40bd75: file ping.c, line 71.
(gdb) break *0x408f8c
Breakpoint 3 at 0x408f8c: file poller.c, line 389.
(gdb) break *0x409b33
Breakpoint 4 at 0x409b33: file poller.c, line 53.
(gdb) Quit

changing poller.c didn't help
so it's now not a problem with gentoo


system info:

Linux mdr 2.6.23.12 #1 SMP Wed Jan 2 14:10:55 CET 2008 x86_64 GNU/Linux
mysql-server_5.0.45

best regards
Suzumushi
User avatar
TheWitness
Developer
Posts: 17004
Joined: Tue May 14, 2002 5:08 pm
Location: MI, USA
Contact:

Post by TheWitness »

Change line 229 in ping.c to the following. See if that helps.

Code: Select all

	char   *cacti_msg = "cacti-monitoring-system\0";
TheWitness
True understanding begins only when we realize how little we truly understand...

Life is an adventure, let yours begin with Cacti!

Author of dozens of Cacti plugins and customization's. Advocate of LAMP, MariaDB, IBM Spectrum LSF and the world of batch. Creator of IBM Spectrum RTM, author of quite a bit of unpublished work and most of Cacti's bugs.
_________________
Official Cacti Documentation
GitHub Repository with Supported Plugins
Percona Device Packages (no support)
Interesting Device Packages


For those wondering, I'm still here, but lost in the shadows. Yearning for less bugs. Who want's a Cacti 1.3/2.0? Streams anyone?
Suzumushi
Posts: 8
Joined: Thu May 12, 2005 9:14 am

Post by Suzumushi »

didn't helped, but this is problem with icmp ping
when using udp ping it seems to be ok
(when running spine as non root user) it looks OK

what's interesting taking ping.c from 0.8.7 and compiling it with 0.8.7b and it now works even with icmp ping

question what will not work now :)

updated "Waiting on 1/8 pollers." issue ;-)

best regards

Suzumushi
User avatar
TheWitness
Developer
Posts: 17004
Joined: Tue May 14, 2002 5:08 pm
Location: MI, USA
Contact:

Post by TheWitness »

That is interesting. I will look into this later tonight.

TheWitness
True understanding begins only when we realize how little we truly understand...

Life is an adventure, let yours begin with Cacti!

Author of dozens of Cacti plugins and customization's. Advocate of LAMP, MariaDB, IBM Spectrum LSF and the world of batch. Creator of IBM Spectrum RTM, author of quite a bit of unpublished work and most of Cacti's bugs.
_________________
Official Cacti Documentation
GitHub Repository with Supported Plugins
Percona Device Packages (no support)
Interesting Device Packages


For those wondering, I'm still here, but lost in the shadows. Yearning for less bugs. Who want's a Cacti 1.3/2.0? Streams anyone?
SeanW
Posts: 26
Joined: Tue Nov 28, 2006 9:17 am
Location: Winnipeg, Canada
Contact:

Post by SeanW »

Any word on this? I also have a 64 bit installation with segfaults.

Thanks,

Sean
glista
Posts: 10
Joined: Mon Mar 19, 2007 12:43 am

Post by glista »

Hello,

spine SVN (20080108) is also crashing on CentOS4.6 (latest updates, etc.).

Code: Select all

[root@ozebnik bin]# ./spine --verbosity=4 36 36
SPINE: Version 0.8.7c starting
01/08/2008 05:43:30 PM - SPINE: Poller[0] Host[36] SNMP Result: Host responded to SNMP
01/08/2008 05:43:30 PM - SPINE: Poller[0] Host[36] DS[115] SNMP: v2: machine.host.si dsname: traffic_in, oid: .1.3.6.1.2.1.31.1.1.1.6.50, value: 7245584814497
01/08/2008 05:43:30 PM - SPINE: Poller[0] Host[36] DS[115] SNMP: v2: machine.host.si, dsname: traffic_out, oid: .1.3.6.1.2.1.31.1.1.1.10.50, value: 14364724344575
*** glibc detected *** free(): invalid next size (fast): 0x096466e0 ***
Aborted
I have tried:
- using ping.c from 0.8.7a
- using ping char \0 patch presented earlier in this thread
- using spine.c from this thread

and all of these failed...

Is there any alternative to spine for large number of devices (>500)?
User avatar
zorrosam
Cacti User
Posts: 244
Joined: Thu May 03, 2007 3:17 pm
Location: Italy

... spine buffer overflow

Post by zorrosam »

even for me on my test server ... buffer overflow with spine ...

tha package is an rpm from dag 0.87-1

[root@achille etc]# /usr/bin/spine
SPINE: Using spine config file [spine.conf]
SPINE: Version 0.8.7 starting
*** buffer overflow detected ***: /usr/bin/spine terminated
======= Backtrace: =========
/lib/libc.so.6(__chk_fail+0x41)[0x33d3a1]
/lib/libc.so.6[0x33cde3]
/lib/libc.so.6(__snprintf_chk+0x37)[0x33ccc7]
/usr/bin/spine[0x8051803]
/usr/bin/spine[0x8051c1d]
/lib/libpthread.so.0[0x3e645b]
/lib/libc.so.6(clone+0x5e)[0x32924e]
======= Memory map: ========
00239000-00252000 r-xp 00000000 09:00 1309442 /lib/ld-2.5.so
00252000-00253000 r-xp 00019000 09:00 1309442 /lib/ld-2.5.so
00253000-00254000 rwxp 0001a000 09:00 1309442 /lib/ld-2.5.so
00256000-00258000 r-xp 00000000 09:00 1311033 /lib/libcom_err.so.2.1
00258000-00259000 rwxp 00001000 09:00 1311033 /lib/libcom_err.so.2.1
0025b000-00395000 r-xp 00000000 09:00 1309469 /lib/libc-2.5.so
00395000-00397000 r-xp 0013a000 09:00 1309469 /lib/libc-2.5.so
00397000-00398000 rwxp 0013c000 09:00 1309469 /lib/libc-2.5.so
00398000-0039b000 rwxp 00398000 00:00 0
0039d000-0039f000 r-xp 00000000 09:00 1309479 /lib/libdl-2.5.so
0039f000-003a0000 r-xp 00001000 09:00 1309479 /lib/libdl-2.5.so
003a0000-003a1000 rwxp 00002000 09:00 1309479 /lib/libdl-2.5.so
003a3000-003c8000 r-xp 00000000 09:00 1309684 /lib/libm-2.5.so
003c8000-003c9000 r-xp 00024000 09:00 1309684 /lib/libm-2.5.so
003c9000-003ca000 rwxp 00025000 09:00 1309684 /lib/libm-2.5.so
003cc000-003de000 r-xp 00000000 09:00 9924606 /usr/lib/libz.so.1.2.3
003de000-003df000 rwxp 00011000 09:00 9924606 /usr/lib/libz.so.1.2.3
003e1000-003f4000 r-xp 00000000 09:00 1309481 /lib/libpthread-2.5.so
003f4000-003f5000 r-xp 00012000 09:00 1309481 /lib/libpthread-2.5.so
003f5000-003f6000 rwxp 00013000 09:00 1309481 /lib/libpthread-2.5.so
003f6000-003f8000 rwxp 003f6000 00:00 0
003fa000-0040f000 r-xp 00000000 09:00 1309720 /lib/libselinux.so.1
0040f000-00411000 rwxp 00015000 09:00 1309720 /lib/libselinux.so.1
00413000-0044e000 r-xp 00000000 09:00 1309712 /lib/libsepol.so.1
0044e000-0044f000 rwxp 0003a000 09:00 1309712 /lib/libsepol.so.1
0044f000-00459000 rwxp 0044f000 00:00 0
00466000-00479000 r-xp 00000000 09:00 1309695 /lib/libnsl-2.5.so
00479000-0047a000 r-xp 00012000 09:00 1309695 /lib/libnsl-2.5.so
0047a000-0047b000 rwxp 00013000 09:00 1309695 /lib/libnsl-2.5.so
0047b000-0047d000 rwxp 0047b000 00:00 0
0047f000-0048e000 r-xp 00000000 09:00 1309706 /lib/libresolv-2.5.so
0048e000-0048f000 r-xp 0000e000 09:00 1309706 /lib/libresolv-2.5.so
0048f000-00490000 rwxp 0000f000 09:00 1309706 /lib/libresolv-2.5.so
00490000-00492000 rwxp 00490000 00:00 0
00494000-005b1000 r-xp 00000000 09:00 1311038 /lib/libcrypto.so.0.9.8b
005b1000-005c4000 rwxp 0011c000 09:00 1311038 /lib/libcrypto.so.0.9.8b
005c4000-005c7000 rwxp 005c4000 00:00 0
005c9000-005ce000 r-xp 00000000 09:00 1309694 /lib/libcrypt-2.5.so
005ce000-005cf000 r-xp 00004000 09:00 1309694 /lib/libcrypt-2.5.so
005cf000-005d0000 rwxp 00005000 09:00 1309694 /lib/libcrypt-2.5.so
005d0000-005f7000 rwxp 005d0000 00:00 0
005f9000-00601000 r-xp 00000000 09:00 9929598 /usr/lib/libkrb5support.so.0.1
00601000-00602000 rwxp 00007000 09:00 9929598 /usr/lib/libkrb5support.so.0.1
00604000-00606000 r-xp 00000000 09:00 1309699 /lib/libkeyutils-1.2.so
00606000-00607000 rwxp 00001000 09:00 1309699 /lib/libkeyutils-1.2.so
00609000-00636000 r-xp 00000000 09:00 9930480 /usr/lib/libgssapi_krb5.so.2.2
00636000-00637000 rwxp 0002d000 09:00 9930480 /usr/lib/libgssapi_krb5.so.2.2
00639000-006c9000 r-xp 00000000 09:00 9930479 /usr/lib/libkrb5.so.3.3
006c9000-006cc000 rwxp 0008f000 09:00 9930479 /usr/lib/libkrb5.so.3.3
006ce000-006f3000 r-xp 00000000 09:00 9930478 /usr/lib/libk5crypto.so.3.1
006f3000-006f4000 rwxp 00025000 09:00 9930478 /usr/lib/libk5crypto.so.3.1
00702000-00703000 r-xp 00702000 00:00 0 [vdso]
0072c000-00737000 r-xp 00000000 09:00 1309457 /lib/libgcc_s-4.1.2-20070626.so.1
00737000-00738000 rwxp 0000a000 09:00 1309457 /lib/libgcc_s-4.1.2-20070626.so.1
007f1000-00832000 r-xp 00000000 09:00 1311039 /lib/libssl.so.0.9.8b
00832000-00836000 rwxp 00040000 09:00 1311039 /lib/libssl.so.0.9.8b
00838000-00959000 r-xp 00000000 09:00 133622 /usr/lib/mysql/libmysqlclient_r.so.15.0.0
00959000-0099b000 rwxp 00120000 09:00 133622 /usr/lib/mysql/libmysqlclient_r.so.15.0.0
0099b000-0099c000 rwxp 0099b000 00:00 0
0099e000-00a35000 r-xp 00000000 09:00 9924586 /usr/lib/libnetsnmp.so.10.0.1
00a35000-00a37000 rwxp 00097000 09:00 9924586 /usr/lib/libnetsnmp.so.10.0.1
00a37000-00a56000 rwxp 00a37000 00:00 0
00c22000-00c2b000 r-xp 00000000 09:00 1309480 /lib/libnss_files-2.5.so
00c2b000-00c2c000 r-xp 00008000 09:00 1309480 /lib/libnss_files-2.5.so
00c2c000-00c2d000 rwxp 00009000 09:00 1309480 /lib/libnss_files-2.5.so
00f7b000-00f7f000 r-xp 00000000 09:00 1309478 /lib/libnss_dns-2.5.so
00f7f000-00f80000 r-xp 00003000 09:00 1309478 /lib/libnss_dns-2.5.so
00f80000-00f81000 rwxp 00004000 09:00 1309478 /lib/libnss_dns-2.5.so
08046000-0805a000 r-xp 00000000 09:00 9937296 /usr/bin/spine
0805a000-0805b000 rw-p 00013000 09:00 9937296 /usr/bin/spine
0805b000-0805d000 rw-p 0805b000 00:00 0
08a94000-08baa000 rw-p 08a94000 00:00 0
b4bb2000-b4bb3000 ---p b4bb2000 00:00 0
b4bb3000-b55b3000 rw-p b4bb3000 00:00 0
b55b3000-b55b4000 ---p b55b3000 00:00 0
b55b4000-b5fb4000 rw-p b55b4000 00:00 0
b5fb4000-b5fb5000 ---p b5fb4000 00:00 0
b5fb5000-b69b5000 rw-p b5fb5000 00:00 0
b69b5000-b69b6000 ---p b69b5000 00:00 0
b69b6000-b73b6000 rw-p b69b6000 00:00 0
b73b6000-b73b7000 ---p b73b6000 00:00 0
b73b7000-b7db7000 rw-p b73b7000 00:00 0
b7db7000-b7fb7000 r--p 00000000 09:00 9936648 /usr/lib/locale/locale-archive
b7fb7000-b7fbd000 rw-p b7fb7000 00:00 0
b7fc8000-b7fca000 rw-p b7fc8000 00:00 0
bf98e000-bf9a3000 rw-p bf98e000 00:00 0 [stack]
Aborted

idea?
User avatar
rcaston
Cacti User
Posts: 204
Joined: Tue Jan 06, 2004 7:47 pm
Location: US-Dallas, TX
Contact:

Re: ... spine buffer overflow

Post by rcaston »

I have the same issue.

zorrosam wrote:even for me on my test server ... buffer overflow with spine ...

tha package is an rpm from dag 0.87-1

[root@achille etc]# /usr/bin/spine
SPINE: Using spine config file [spine.conf]
SPINE: Version 0.8.7 starting
*** buffer overflow detected ***: /usr/bin/spine terminated
======= Backtrace: =========
/lib/libc.so.6(__chk_fail+0x41)[0x33d3a1]
/lib/libc.so.6[0x33cde3]
/lib/libc.so.6(__snprintf_chk+0x37)[0x33ccc7]
/usr/bin/spine[0x8051803]
/usr/bin/spine[0x8051c1d]
/lib/libpthread.so.0[0x3e645b]
/lib/libc.so.6(clone+0x5e)[0x32924e]
======= Memory map: ========
00239000-00252000 r-xp 00000000 09:00 1309442 /lib/ld-2.5.so
00252000-00253000 r-xp 00019000 09:00 1309442 /lib/ld-2.5.so
00253000-00254000 rwxp 0001a000 09:00 1309442 /lib/ld-2.5.so
00256000-00258000 r-xp 00000000 09:00 1311033 /lib/libcom_err.so.2.1
00258000-00259000 rwxp 00001000 09:00 1311033 /lib/libcom_err.so.2.1
0025b000-00395000 r-xp 00000000 09:00 1309469 /lib/libc-2.5.so
00395000-00397000 r-xp 0013a000 09:00 1309469 /lib/libc-2.5.so
00397000-00398000 rwxp 0013c000 09:00 1309469 /lib/libc-2.5.so
00398000-0039b000 rwxp 00398000 00:00 0
0039d000-0039f000 r-xp 00000000 09:00 1309479 /lib/libdl-2.5.so
0039f000-003a0000 r-xp 00001000 09:00 1309479 /lib/libdl-2.5.so
003a0000-003a1000 rwxp 00002000 09:00 1309479 /lib/libdl-2.5.so
003a3000-003c8000 r-xp 00000000 09:00 1309684 /lib/libm-2.5.so
003c8000-003c9000 r-xp 00024000 09:00 1309684 /lib/libm-2.5.so
003c9000-003ca000 rwxp 00025000 09:00 1309684 /lib/libm-2.5.so
003cc000-003de000 r-xp 00000000 09:00 9924606 /usr/lib/libz.so.1.2.3
003de000-003df000 rwxp 00011000 09:00 9924606 /usr/lib/libz.so.1.2.3
003e1000-003f4000 r-xp 00000000 09:00 1309481 /lib/libpthread-2.5.so
003f4000-003f5000 r-xp 00012000 09:00 1309481 /lib/libpthread-2.5.so
003f5000-003f6000 rwxp 00013000 09:00 1309481 /lib/libpthread-2.5.so
003f6000-003f8000 rwxp 003f6000 00:00 0
003fa000-0040f000 r-xp 00000000 09:00 1309720 /lib/libselinux.so.1
0040f000-00411000 rwxp 00015000 09:00 1309720 /lib/libselinux.so.1
00413000-0044e000 r-xp 00000000 09:00 1309712 /lib/libsepol.so.1
0044e000-0044f000 rwxp 0003a000 09:00 1309712 /lib/libsepol.so.1
0044f000-00459000 rwxp 0044f000 00:00 0
00466000-00479000 r-xp 00000000 09:00 1309695 /lib/libnsl-2.5.so
00479000-0047a000 r-xp 00012000 09:00 1309695 /lib/libnsl-2.5.so
0047a000-0047b000 rwxp 00013000 09:00 1309695 /lib/libnsl-2.5.so
0047b000-0047d000 rwxp 0047b000 00:00 0
0047f000-0048e000 r-xp 00000000 09:00 1309706 /lib/libresolv-2.5.so
0048e000-0048f000 r-xp 0000e000 09:00 1309706 /lib/libresolv-2.5.so
0048f000-00490000 rwxp 0000f000 09:00 1309706 /lib/libresolv-2.5.so
00490000-00492000 rwxp 00490000 00:00 0
00494000-005b1000 r-xp 00000000 09:00 1311038 /lib/libcrypto.so.0.9.8b
005b1000-005c4000 rwxp 0011c000 09:00 1311038 /lib/libcrypto.so.0.9.8b
005c4000-005c7000 rwxp 005c4000 00:00 0
005c9000-005ce000 r-xp 00000000 09:00 1309694 /lib/libcrypt-2.5.so
005ce000-005cf000 r-xp 00004000 09:00 1309694 /lib/libcrypt-2.5.so
005cf000-005d0000 rwxp 00005000 09:00 1309694 /lib/libcrypt-2.5.so
005d0000-005f7000 rwxp 005d0000 00:00 0
005f9000-00601000 r-xp 00000000 09:00 9929598 /usr/lib/libkrb5support.so.0.1
00601000-00602000 rwxp 00007000 09:00 9929598 /usr/lib/libkrb5support.so.0.1
00604000-00606000 r-xp 00000000 09:00 1309699 /lib/libkeyutils-1.2.so
00606000-00607000 rwxp 00001000 09:00 1309699 /lib/libkeyutils-1.2.so
00609000-00636000 r-xp 00000000 09:00 9930480 /usr/lib/libgssapi_krb5.so.2.2
00636000-00637000 rwxp 0002d000 09:00 9930480 /usr/lib/libgssapi_krb5.so.2.2
00639000-006c9000 r-xp 00000000 09:00 9930479 /usr/lib/libkrb5.so.3.3
006c9000-006cc000 rwxp 0008f000 09:00 9930479 /usr/lib/libkrb5.so.3.3
006ce000-006f3000 r-xp 00000000 09:00 9930478 /usr/lib/libk5crypto.so.3.1
006f3000-006f4000 rwxp 00025000 09:00 9930478 /usr/lib/libk5crypto.so.3.1
00702000-00703000 r-xp 00702000 00:00 0 [vdso]
0072c000-00737000 r-xp 00000000 09:00 1309457 /lib/libgcc_s-4.1.2-20070626.so.1
00737000-00738000 rwxp 0000a000 09:00 1309457 /lib/libgcc_s-4.1.2-20070626.so.1
007f1000-00832000 r-xp 00000000 09:00 1311039 /lib/libssl.so.0.9.8b
00832000-00836000 rwxp 00040000 09:00 1311039 /lib/libssl.so.0.9.8b
00838000-00959000 r-xp 00000000 09:00 133622 /usr/lib/mysql/libmysqlclient_r.so.15.0.0
00959000-0099b000 rwxp 00120000 09:00 133622 /usr/lib/mysql/libmysqlclient_r.so.15.0.0
0099b000-0099c000 rwxp 0099b000 00:00 0
0099e000-00a35000 r-xp 00000000 09:00 9924586 /usr/lib/libnetsnmp.so.10.0.1
00a35000-00a37000 rwxp 00097000 09:00 9924586 /usr/lib/libnetsnmp.so.10.0.1
00a37000-00a56000 rwxp 00a37000 00:00 0
00c22000-00c2b000 r-xp 00000000 09:00 1309480 /lib/libnss_files-2.5.so
00c2b000-00c2c000 r-xp 00008000 09:00 1309480 /lib/libnss_files-2.5.so
00c2c000-00c2d000 rwxp 00009000 09:00 1309480 /lib/libnss_files-2.5.so
00f7b000-00f7f000 r-xp 00000000 09:00 1309478 /lib/libnss_dns-2.5.so
00f7f000-00f80000 r-xp 00003000 09:00 1309478 /lib/libnss_dns-2.5.so
00f80000-00f81000 rwxp 00004000 09:00 1309478 /lib/libnss_dns-2.5.so
08046000-0805a000 r-xp 00000000 09:00 9937296 /usr/bin/spine
0805a000-0805b000 rw-p 00013000 09:00 9937296 /usr/bin/spine
0805b000-0805d000 rw-p 0805b000 00:00 0
08a94000-08baa000 rw-p 08a94000 00:00 0
b4bb2000-b4bb3000 ---p b4bb2000 00:00 0
b4bb3000-b55b3000 rw-p b4bb3000 00:00 0
b55b3000-b55b4000 ---p b55b3000 00:00 0
b55b4000-b5fb4000 rw-p b55b4000 00:00 0
b5fb4000-b5fb5000 ---p b5fb4000 00:00 0
b5fb5000-b69b5000 rw-p b5fb5000 00:00 0
b69b5000-b69b6000 ---p b69b5000 00:00 0
b69b6000-b73b6000 rw-p b69b6000 00:00 0
b73b6000-b73b7000 ---p b73b6000 00:00 0
b73b7000-b7db7000 rw-p b73b7000 00:00 0
b7db7000-b7fb7000 r--p 00000000 09:00 9936648 /usr/lib/locale/locale-archive
b7fb7000-b7fbd000 rw-p b7fb7000 00:00 0
b7fc8000-b7fca000 rw-p b7fc8000 00:00 0
bf98e000-bf9a3000 rw-p bf98e000 00:00 0 [stack]
Aborted

idea?
hurgh
Posts: 13
Joined: Wed Oct 11, 2006 2:40 am
Contact:

Post by hurgh »

I am also having the same issue.

It was working fine when there was only the localhost (fresh cacti install), but when I started adding other devices, it just broke.

I am getting the same messages as above. I wont paste them here cause they will just take up space.

-Hurgh-
XenoPhage
Posts: 4
Joined: Wed Feb 28, 2007 2:10 pm

Post by XenoPhage »

Similar problem here.

Fedora 8 system, Pentium 4 Xeon 2.6 Ghz
Cacti 0.8.7a
Spine 0.8.7a
Net-SNMP 5.4.1

Output from spine is as follows :

Code: Select all

[friz@dev-friz glTail]$ spine
SPINE: Using spine config file [/etc/spine.conf]
*snip*
SPINE: Version 0.8.7b starting
*snip*
ERROR: Spine Log File Could Not Be Opened/Created
*snip*
01/22/2008 10:29:42 AM - SPINE: Poller[0] Host[20] PING Result: UDP: Ping timed out
01/22/2008 10:29:42 AM - SPINE: Poller[0] Host[20] SNMP Result: Host responded to SNMP
01/22/2008 10:29:42 AM - SPINE: Poller[0] DEBUG: SQL:'SELECT data_query_id, action, op, assert_value, arg1 FROM poller_reindex WHERE host_id=20'
01/22/2008 10:29:42 AM - SPINE: Poller[0] Host[20] RECACHE: Processing 1 items in the auto reindex cache for '192.168.233.10'
*** buffer overflow detected ***: spine terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x48)[0xb7eb58]
/lib/libc.so.6[0xb7d200]
/lib/libc.so.6[0xb7cb43]
/lib/libc.so.6(__snprintf_chk+0x37)[0xb7ca27]
spine[0x80516a3]
spine[0x8051add]
/lib/libpthread.so.0[0xc2750b]
/lib/libc.so.6(clone+0x5e)[0xb68b2e]
======= Memory map: ========
*snip*
GDB output :

Code: Select all

[friz@dev-friz glTail]$ gdb spine
GNU gdb Red Hat Linux (6.6-40.fc8rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) break *0x80516a3
Breakpoint 1 at 0x80516a3: file /usr/include/bits/stdio2.h, line 65.
(gdb) break *0x8051add
Breakpoint 2 at 0x8051add: file poller.c, line 53.
(gdb) 
poller.c code :

Code: Select all

51:    poll_host(host_id);
52:
53:    thread_mutex_lock(LOCK_THREAD);
54:
55:    active_threads--;
fireman949
Posts: 11
Joined: Fri Apr 14, 2006 10:11 am
Location: MS

Post by fireman949 »

Same issue here using dag's :
cacti-spine-0.8.7-1.el5.rf on 64bit CentOS5 Can paste logs / info if needed but there is already similar to what I have in the thread.
mia1dolfan
Posts: 18
Joined: Tue Oct 02, 2007 3:19 pm

Post by mia1dolfan »

Code: Select all

./spine
SPINE: Using spine config file [spine.conf]
SPINE: Version 0.8.7b starting
*** glibc detected *** ./spine: free(): invalid next size (fast): 0x000000000e5208c0 ***
======= Backtrace: =========
/lib64/libc.so.6[0x33d7c6f4f4]
/lib64/libc.so.6(cfree+0x8c)[0x33d7c72b1c]
./spine[0x40b6d5]
./spine[0x40ba55]
./spine[0x408c2f]
./spine[0x4097d3]
/lib64/libpthread.so.0[0x33d88062f7]
/lib64/libc.so.6(clone+0x6d)[0x33d7cce85d]
*snipe*
Same issue here after upgrading from CentOS 4 to CentOS 5 on a Intel(R) Xeon(TM) x86_64 platform. I've tried the stable source, SVN, and dag.wieers.com binary rpm cacti-spine-0.8.7a-1.el5.rf.x86_64.rpm - all with the same result. :( Has any one found a workaround?
mia1dolfan
Posts: 18
Joined: Tue Oct 02, 2007 3:19 pm

Post by mia1dolfan »

Suzumushi wrote:what's interesting taking ping.c from 0.8.7 and compiling it with 0.8.7b and it now works even with icmp ping
That also worked for me. Thank you Suzumushi :P
mia1dolfan
Posts: 18
Joined: Tue Oct 02, 2007 3:19 pm

Post by mia1dolfan »

I created a official bug report at http://bugs.cacti.net/view.php?id=1183
kozle
Posts: 1
Joined: Wed Feb 27, 2008 2:37 am

Post by kozle »

The bug fix didn't work for me.

I have 32bit CentOS system. I also have the same buffer overflow problem.
Spine works only for localhost checks, but when it comes to checking our routers via SNMP it crashes.

So I took the old spine - cactid, compiled it and renamed cacid binary file to spine. I've left cactid.conf unchanged. SNMP queries started to work, but localhost checks doesn't work anymore.
Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests