Two small errors in ausearch-parse.c

Emily Ratliff ejratl at gmail.com
Sat Oct 3 23:13:16 UTC 2015


While testing usage of some tools, I stumbled across two small errors in
ausearch-parse.c. I have attached two patches
end-fix.patch fixes the segfaults which can be found by running
ausearch -m USER_AUTH,USER_ACCT --success no --if end-986-dump.log
and
ausearch -m USER_AUTH,USER_ACCT --success no --if error-ausearch.log

term-segfault.patch fixes the errors that can be found by running
aureport -if corrupt-log-for-aureport.log
and
ausearch -m USER_AUTH,USER_ACCT --success no --if
corrupt-log-for-ausearch.log

The erroneous log files were produced using zzuf. The corrupted log files
are also attached. It is unlikely that a user will encounter corrupted
audit log files in the wild, so these bugs aren't serious, but they are
easy to fix.

Emily
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: end-fix.patch
Type: text/x-patch
Size: 425 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: term-segfault.patch
Type: text/x-patch
Size: 431 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: corrupt-log-for-aureport.log
Type: text/x-log
Size: 264 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: corrupt-log-for-ausearch.log
Type: text/x-log
Size: 274 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: end-986-dump.log
Type: text/x-log
Size: 273 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: error-ausearch.log
Type: text/x-log
Size: 259 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20151003/7453faac/attachment-0005.bin>


More information about the Linux-audit mailing list