[Open-scap] probe_process58 (1.2.10) crashes on SLES11 SP4

[Zbynek Moravec]

Hi,

I am not able to reproduce it on Fedora. Same as your previous bug -
we need more information about openscap build, you've used.

Thank you

Z.

----- Original Message -----
> From: "Andreas Krause" <open-scap-list at domov.de>
> To: open-scap-list at redhat.com
> Sent: Thursday, October 13, 2016 12:31:13 PM
> Subject: [Open-scap] probe_process58 (1.2.10) crashes on SLES11 SP4
> 
> Hello,
> 
> with openscap version 1.2.10 probe_process58 crashes on SLES11 SP4.
> 
> Minimal oval example:
> 
> <?xml version="1.0" encoding="UTF-8"?>
> <oval_definitions
> xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
> xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
> xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5"
> xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"
> xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5
> oval-definitions-schema.xsd
> http://oval.mitre.org/XMLSchema/oval-definitions-5#unix
> unix-definitions-schema.xsd
> http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd">
>   <generator>
>     <oval:product_name>Enhanced SCAP Content Editor
> (eSCAPe)</oval:product_name>
>     <oval:product_version>1.2.2</oval:product_version>
>     <oval:schema_version>5.10</oval:schema_version>
>     <oval:timestamp>2016-04-13T09:46:27</oval:timestamp>
>   </generator>
>   <!--generated.oval.base.identifier=process58_test-->
>   <definitions>
>     <definition id="oval:process58_test:def:1" version="1"
> class="compliance">
>       <metadata>
>         <title>process58_test</title>
>         <affected family="unix">
>           <platform>Red Hat Enterprise Linux</platform>
>           <platform>SUSE Linux Enterprise all versions</platform>
>         </affected>
>         <description>process58_test</description>
>       </metadata>
>       <criteria operator="AND" negate="false" comment="process58_test">
>         <criterion comment="dsmc scheduler process is running"
> test_ref="oval:process58_test:tst:1" negate="false" />
>       </criteria>
>     </definition>
>   </definitions>
>   <tests>
>     <process58_test
> xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"
> id="oval:process58_test:tst:1" version="1" check="all" comment="dsmc
> scheduler process is running" check_existence="at_least_one_exists">
>       <object object_ref="oval:process58_test:obj:1" />
>     </process58_test>
>   </tests>
>   <objects>
>     <process58_object
> xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"
> id="oval:process58_test:obj:1" version="1" comment="dsmc scheduler process">
>       <command_line datatype="string" operation="pattern match">^dsmc
> schedule.*$</command_line>
>       <pid datatype="int" operation="greater than">0</pid>
>     </process58_object>
>   </objects>
> </oval_definitions>
> 
> 
> Evaluating this leads to this output:
> 
> # oscap oval eval process58_test-oval.xml
> Definition oval:process58_test:def:1: unknown
> OpenSCAP Error: Probe with PID=2616 has been killed with signal 11
> [sch_pipe.c:173]
> Unable to close probe sd [oval_probe_ext.c:424]
> Unable to receive a message from probe [oval_probe_ext.c:579]
> Invalid oval result type: -1. [oval_resultTest.c:179]
> 
> _______________________________________________
> Open-scap-list mailing list
> Open-scap-list at redhat.com
> https://www.redhat.com/mailman/listinfo/open-scap-list
>