ra* segfault with zero width column size

[Carter Bullard]

I can do that ….  So we'll print an error, showing the field definition that's at fault, saying <= 0 length is an error.
I'll have to add to the man page that zero length and less is going to be a problem, 

Carter



On Jun 10, 2013, at 12:08 PM, elof2 at sentor.se wrote:

> 
> Print an error, imho ...perhaps including instructions on how to remove the column with the "-s <name>" option...
> 
> /Elof
> 
> On Mon, 10 Jun 2013, Carter Bullard wrote:
> 
>> Hey /Elof,
>> What do you think?  Should be keep going and not print that field, or should be error?
>> Carter
>> 
>> 
>> On Jun 10, 2013, at 11:33 AM, elof2 at sentor.se wrote:
>> 
>>> 
>>> I accidentally set the column size to zero:
>>> ra -Zb -nnn -r argus.log -s stime:0 proto saddr sport dir:3 daddr:50 dport sbytes dbytes state:13
>>> and got:
>>> ra[11222]: segfault at 0 ip 0000000000433f3c sp 00007fff01444370 error 4 in ra[400000+9d000]
>>> Segmentation fault: 11 (core dumped)
>>> 
>>> Tested on ra versions 3.0.6.2 and 3.0.5.11. Both segfault.
>>> 
>>> /Elof
>>> 
>> 
>> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130610/af23cbfc/attachment.bin>