[syslog-ng] Syslog-ng-2.05 Segmentation Fault

Balazs Scheidler bazsi at balabit.hu
Thu Nov 8 08:29:32 CET 2007


On Thu, 2007-11-08 at 13:32 +1100, Daniel Szmandiuk wrote:
> Syslog-ng experiences a segmentation fault whenever a message is
> processed:
>  
> <stop syslogd first>
> # syslog-ng -d -d -v -F -e
> syslog-ng starting up; version='2.0.5'
> Incoming log entry; line='<28>Nov  9 10:11:24 xinetd[12285]:
> Exiting...'
> Filter rule evaluation begins; filter_rule='f_emerg'
> Filter node evaluation result; filter_result='not-match',
> filter_type='level'
> Filter rule evaluation result; filter_result='not-match',
> filter_rule='f_emerg'
> Filter rule evaluation begins; filter_rule='f_secure'
> Filter node evaluation result; filter_result='not-match',
> filter_type='facility'
> Filter rule evaluation result; filter_result='not-match',
> filter_rule='f_secure'
> Filter rule evaluation begins; filter_rule='f_cron'
> Filter node evaluation result; filter_result='not-match',
> filter_type='facility'
> Filter rule evaluation result; filter_result='not-match',
> filter_rule='f_cron'
> Filter rule evaluation begins; filter_rule='f_spooler'
> Filter node evaluation result; filter_result='not-match',
> filter_type='facility'
> Filter node evaluation result; filter_result='not-match',
> filter_type='AND'
> Filter rule evaluation result; filter_result='not-match',
> filter_rule='f_spooler'
> Filter rule evaluation begins; filter_rule='f_local7'
> Filter node evaluation result; filter_result='not-match',
> filter_type='facility'
> Filter rule evaluation result; filter_result='not-match',
> filter_rule='f_local7'
> Filter rule evaluation begins; filter_rule='f_messages'
> Filter node evaluation result; filter_result='match',
> filter_type='level'
> Filter rule evaluation result; filter_result='match',
> filter_rule='f_messages'
> Initializing destination file writer; template='/var/log/messages',
> filename='/var/log/messages'
> Segmentation fault
> 
> Platform is VMware Guest running RHEL5 x86_64.
>  
> I used the following steps to build from source:
>  
> Download eventlog-0.2.5 source
> ./configure --prefix=/usr --sysconfdir=/etc
> make
> make install
>  
> export PKG_CONFIG_PATH="/usr/lib/pkgconfig"
>  
> Download syslog-ng-2.0.5 source.
> ./configure --sysconfdir=/etc
> make
> make install
> 
> I've basically used the supplied config file for Redhat in contrib
> folder. I'm uncommented the relevant lines in order to use syslog-ng
> in place of syslogd.
>  
> Syslog-ng runs OK but as soon as it tries to process a syslog message,
> it dies with a segmentation fault.
>  
> Any ideas anyone?
>  
> Daniel

Could you generate a backtrace, with debugging symbols enabled? E.g.
make sure that -g is present in the compiler options, enable core files
using "ulimit -c", wait while syslog-ng crashes and then:

gdb /usr/sbin/syslog-ng -c <path-to-core-file>
(gdb) bt full

and post the results.

-- 
Bazsi



More information about the syslog-ng mailing list