[syslog-ng]1.5.23 dies

[Jaakko Niemi]

Balazs Scheidler <bazsi@balabit.hu> writes:

> On Tue, Nov 05, 2002 at 07:02:20PM +0200, Jaakko Niemi wrote:
>> Balazs Scheidler <bazsi@balabit.hu> writes:
>> 
>> > On Tue, Nov 05, 2002 at 06:44:36PM +0200, Jaakko Niemi wrote:
>> >> 
>> >>  Hi,
>> >> 
>> >> gc_mark: Marking object of class 'affile_dest_reaper' (1)
>> >> io.c: sockaddr2info(): Unsupported address family 63828.
>> >
>> > this is caused by a kernel bug. the latest libol has workaround (0.3.5), or
>> > install 2.4.20 (it was fixed in one of the preXX releases)
>> 
>>  Well, the machine is running 2.4.20-rc1, and I compiled with libol 0.3.5.
>
> hm.. please check what you get back upon return from recvfrom()
>
> the bug was that for SOCK_DGRAM unix domain sockets, recvfrom() returned a
> sockaddr struct 2 bytes long, and the sa_family member was not filled.

 Hmm, I missed that from the changelog..

> try strace-ing the process, and see what the kernel returns.

poll([{fd=9, events=POLLOUT, revents=POLLOUT}, {fd=4, events=POLLIN}, {fd=3, events=POLLIN}], 3, 100) = 1
write(9, "Nov  5 17:53:01 jumper INPUT"..., 244) = 244
time(NULL)                              = 1036511581
poll([{fd=9, events=0}, {fd=4, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 3, 100) = 1
read(4, "<7>INPUT drop: IN=eth0 OUT= MAC="..., 2048) = 221
time(NULL)                              = 1036511581
time(NULL)                              = 1036511581
time(NULL)                              = 1036511581
time(NULL)                              = 1036511581
poll([{fd=9, events=POLLOUT, revents=POLLOUT}, {fd=4, events=POLLIN}, {fd=3, events=POLLIN}], 3, 100) = 1
write(9, "Nov  5 17:53:01 jumper INPUT"..., 245) = 245
time(NULL)                              = 1036511581
poll([{fd=9, events=0}, {fd=4, events=POLLIN}, {fd=3, events=POLLIN, revents=POLLIN}], 3, 100) = 1
recvfrom(3, "<38>Nov  5 17:53:01 PAM_unix[952"..., 2048, 0, {sin_family=0xf80c /* AF_??? */, {sa_family=63500, sa_data="\377\27
7\6\351\4\10\10\270\5\10\360@\5\10"}, [256]) = 82
time(NULL)                              = 1036511581
time(NULL)                              = 1036511581
write(2, "io.c: sockaddr2info(): Unsupport"..., 57io.c: sockaddr2info(): Unsupported address family 63500.
) = 57
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
getpid()                                = 9523
kill(9523, SIGABRT)                     = 0
--- SIGABRT (Aborted) ---
+++ killed by SIGABRT +++

 Only modification to the kernel is that HZ is defined as 1024, but I don't see
how this can affect. 

                     --j