[Open-scap] Need help with dpkg probe dev

[Daniel Kopecek]

Hello,

On 08/04/2011 09:51 PM, Pierre Chifflier wrote:
> Hi,
> 
> I am trying to update the dpkginfo probe to the current probe API
> version, and have a problem when running an eval:
> 
> ./utils/oscap oval eval --results res.xml oval-2011-08-03.16.24.30.xml
> Definition oval:org.mitre.oval:def:6513: false
> ERROR: Unable to close probe sd
> 
> The debug file (attached) does not give more details on what is
> happening.
> 
> The code of the probe is inspired from the rpminfo, and I cannot find
> why the probe fails.
> 
> Any help would be greatly appreciated.

it seems like a segfault to me. Does it generate a core file? Since I
don't have access to a Debian based system, I can't reproduce it myself.
Try to check the probe with valgrind:

$ valgrind --trace-children=yes ./utils/oscap oval eval \
	oval-2011-08-03.16.24.30.xml

Thanks,
Dan K.