<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="generator" content="Osso Notes">
<title></title></head>
<body>
<p>I've just merged a branch to add support for huge nvtables.
<br>
<br>It was resting in a separate branch for a while until the upstream sign-off has arrived.
<br>
<br>that maybe the culprit.
<br>
<br>----- Original message -----
<br>> On 04/03/2012 03:38 PM, Peter Czanik wrote:
<br>> > On 04/03/2012 03:20 PM, Gergely Nagy wrote:
<br>> > > thread apply all backtrace
<br>> > fb81# gdb74 -c syslog-ng.core /usr/local/sbin/syslog-ng
<br>> > GNU gdb (GDB) 7.4 [GDB v7.4 for FreeBSD]
<br>> > Copyright (C) 2012 Free Software Foundation, Inc.
<br>> > License GPLv3+: GNU GPL version 3 or later
<br>> > <<a href="http://gnu.org/licenses/gpl.html>">http://gnu.org/licenses/gpl.html></a>;
<br>> > This is free software: you are free to change and redistribute it.
<br>> > There is NO WARRANTY, to the extent permitted by law.  Type "show
<br>> > copying" and "show warranty" for details.
<br>> > This GDB was configured as "x86_64-portbld-freebsd8.1".
<br>> > For bug reporting instructions, please see:
<br>> > <<a href="http://www.gnu.org/software/gdb/bugs/>">http://www.gnu.org/software/gdb/bugs/></a>;...
<br>> > Reading symbols from /usr/local/sbin/syslog-ng...(no debugging symbols
<br>> > found)...done.
<br>> > [New process 100048]
<br>> > [New Thread 8016041c0 (LWP 100048)]
<br>> > Core was generated by `syslog-ng'.
<br>> > Program terminated with signal 11, Segmentation fault.
<br>> > #0  0x0000000801428b86 in memcpy () from /lib/libc.so.7
<br>> > (gdb) thread apply all backtrace
<br>> >
<br>> > Thread 1 (Thread 8016041c0 (LWP 100048)):
<br>> > #0  0x0000000801428b86 in memcpy () from /lib/libc.so.7
<br>> > #1  0x0000000800687c28 in nv_table_add_value ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #2  0x0000000800676499 in log_msg_set_value ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #3  0x000000080066f6de in log_src_driver_queue_method ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #4  0x000000080067f7dd in log_source_queue ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #5  0x0000000800668fc2 in afinter_source_post ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #6  0x000000080069e167 in iv_event_run_pending_events ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #7  0x000000080069e514 in iv_event_raw_got_event ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #8  0x000000080069fb2a in iv_main ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #9  0x000000080068532e in main_loop_run ()
<br>> > from /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> > #10 0x00000000004016e2 in main ()
<br>> > (gdb) quit
<br>> >
<br>> >
<br>> And compiled with --enable-debug:
<br>> fb81# gdb74 -c syslog-ng.core /usr/local/sbin/syslog-ng
<br>> GNU gdb (GDB) 7.4 [GDB v7.4 for FreeBSD]
<br>> Copyright (C) 2012 Free Software Foundation, Inc.
<br>> License GPLv3+: GNU GPL version 3 or later
<br>> <<a href="http://gnu.org/licenses/gpl.html>">http://gnu.org/licenses/gpl.html></a>;
<br>> This is free software: you are free to change and redistribute it.
<br>> There is NO WARRANTY, to the extent permitted by law.  Type "show
<br>> copying" and "show warranty" for details.
<br>> This GDB was configured as "x86_64-portbld-freebsd8.1".
<br>> For bug reporting instructions, please see:
<br>> <<a href="http://www.gnu.org/software/gdb/bugs/>">http://www.gnu.org/software/gdb/bugs/></a>;...
<br>> Reading symbols from /usr/local/sbin/syslog-ng...(no debugging symbols
<br>> found)...done.
<br>> [New process 100064]
<br>> [New Thread 8016041c0 (LWP 100064)]
<br>> Core was generated by `syslog-ng'.
<br>> Program terminated with signal 11, Segmentation fault.
<br>> #0  0x000000080142fb86 in memcpy () from /lib/libc.so.7
<br>> (gdb) thread apply all backtrace
<br>>
<br>> Thread 1 (Thread 8016041c0 (LWP 100064)):
<br>> #0  0x000000080142fb86 in memcpy () from /lib/libc.so.7
<br>> #1  0x00000008006884a8 in nv_table_add_value (self=0x803c00000,
<br>> handle=7, name=0x80161b1c8 "SOURCE", name_len=6, value=0x80161b4c0
<br>> "s_local",
<br>>  value_len=23133952, new_entry=0x7fffffffe424) at nvtable.c:464
<br>> #2  0x0000000800676809 in log_msg_set_value (self=0x801610500, handle=7,
<br>> value=0x80161b4c0 "s_local", value_len=23133952) at logmsg.c:450
<br>> #3  0x000000080066fa4e in log_src_driver_queue_method (s=0x80160b800,
<br>> msg=0x801610500, path_options=0x7fffffffe4a0, user_data=<optimized out>)
<br>>  at driver.c:161
<br>> #4  0x000000080067fedd in log_pipe_queue (path_options=<optimized out>,
<br>> msg=<optimized out>, s=<optimized out>) at logpipe.h:304
<br>> #5  log_pipe_forward_msg (path_options=<optimized out>, msg=<optimized
<br>> out>, self=<optimized out>) at logpipe.h:290
<br>> #6  log_source_queue (s=0x80160ff00, msg=0x801610500,
<br>> path_options=<optimized out>, user_data=<optimized out>) at
<br>> logsource.c:290 #7  0x0000000800669332 in log_pipe_queue
<br>> (path_options=<optimized out>,  msg=<optimized out>, s=<optimized out>)
<br>> at logpipe.h:304 #8  afinter_source_post (s=<optimized out>) at
<br>> afinter.c:115 #9  0x00000008006a3297 in iv_event_run_pending_events ()
<br>> from  /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> #10 0x00000008006a3644 in iv_event_raw_got_event () from
<br>> /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> #11 0x00000008006a4c5a in iv_main () from
<br>> /usr/local/lib/libsyslog-ng-3.4.0alpha1.so
<br>> #12 0x0000000800685bae in main_loop_run () at mainloop.c:731
<br>> #13 0x0000000000401722 in main ()
<br>>
<br>> The config is quite simple:
<br>>
<br>> fb81# cat /usr/local/etc/syslog-ng.conf
<br>> #############################################################################
<br>> # Default syslog-ng.conf file which collects all local logs into a
<br>> # single file called /var/log/messages.
<br>> #
<br>>
<br>> @version: 3.4
<br>> @include "scl.conf"
<br>>
<br>> source s_local {
<br>>  system();
<br>>  internal();
<br>> };
<br>>
<br>> source s_network {
<br>>  udp();
<br>> };
<br>>
<br>> destination d_local {
<br>>  file("/var/log/messages");
<br>> };
<br>>
<br>> log {
<br>>  source(s_local);
<br>>
<br>>  # uncomment this line to open port 514 to receive messages
<br>>  #source(s_network);
<br>>  destination(d_local);
<br>> };
<br>>
<br>>
<br>> Bye,
<br>>
<br>> --
<br>> Peter Czanik (CzP)<<a href="mailto:czanik@balabit.hu">czanik@balabit.hu</a>>
<br>> BalaBit IT Security / syslog-ng upstream
<br>> <a href="http://czanik.blogs.balabit.com/">http://czanik.blogs.balabit.com/</a>
<br>>
<br>>
<br>> ______________________________________________________________________________
<br>> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
<br>> Documentation:
<br>> <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a> FAQ:
<br>> <a href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
<br>>
<br><br></p>
</body>
</html>