agent crash at boost::asio::ip::address::to_v6 during a hping port-scan test
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
R2.20 |
Fix Committed
|
Critical
|
Hari Prasad Killi | |||
R2.21.x |
Fix Committed
|
Critical
|
Hari Prasad Killi | |||
R2.22.x |
Fix Committed
|
Critical
|
Hari Prasad Killi | |||
R3.0 |
Fix Committed
|
Critical
|
Hari Prasad Killi | |||
Trunk |
Fix Committed
|
Critical
|
Hari Prasad Killi |
Bug Description
R3.0.2.0 Build 26 ubuntu 14.04 Kilo
On running n X n hping port-scan, observed the below crashed pretty regularly on a node
Core will be in http://
This bt got when run inside of gdb,
(gdb) bt
#0 0x00007ffff5b7d8b0 in __cxa_throw () from /usr/lib/
#1 0x00000000013bf788 in boost::
#2 0x0000000001608c3a in boost::
#3 0x000000000184bb12 in Dhcpv6Handler:
#4 0x0000000001849702 in Dhcpv6Handler::Run (this=0x7fffc9f
#5 0x0000000001965a49 in Proto::
#6 0x0000000001965b36 in Proto::ProcessProto (this=0x7fffcff
#7 0x00000000019689a8 in boost::
at /usr/include/
#8 0x0000000001968354 in boost::
#9 0x0000000001967cc8 in boost::
#10 0x00000000019678f9 in boost::
#11 0x0000000001969146 in boost::
#12 0x0000000001968d20 in QueueTaskRunner
#13 0x0000000001968b26 in QueueTaskRunner
#14 0x0000000002080285 in TaskImpl::execute (this=0x7fffee9
#15 0x00007ffff5e43b3a in ?? () from /usr/lib/
#16 0x00007ffff5e3f816 in ?? () from /usr/lib/
#17 0x00007ffff5e3ef4b in ?? () from /usr/lib/
#18 0x00007ffff5e3b0ff in ?? () from /usr/lib/
#19 0x00007ffff5e3b2f9 in ?? () from /usr/lib/
#20 0x00007ffff605f182 in start_thread () from /lib/x86_
#21 0x00007ffff533847d in clone () from /lib/x86_
(gdb)
In normal run mode, the bt got is :
#0 0x00007f1b1d012cc9 in raise () from /lib/x86_
#1 0x00007f1b1d0160d8 in abort () from /lib/x86_
#2 0x00007f1b1d00bb86 in ?? () from /lib/x86_
#3 0x00007f1b1d00bc32 in __assert_fail () from /lib/x86_
#4 0x00000000020805d7 in TaskImpl::execute (this=0x7f1b1fc
#5 0x00007f1b1dbe1b3a in ?? () from /usr/lib/
#6 0x00007f1b1dbdd816 in ?? () from /usr/lib/
#7 0x00007f1b1dbdcf4b in ?? () from /usr/lib/
#8 0x00007f1b1dbd90ff in ?? () from /usr/lib/
#9 0x00007f1b1dbd92f9 in ?? () from /usr/lib/
#10 0x00007f1b1ddfd182 in start_thread () from /lib/x86_
#11 0x00007f1b1d0d647d in clone () from /lib/x86_
(gdb) quit
Changed in juniperopenstack: | |
assignee: | Prabhjot Singh Sethi (prabhjot) → Hari Prasad Killi (haripk) |
tags: | added: blocker |
The incoming IPv4 packet had UDP traffic sent with DHCPv6 port numbers. This was being classified as DHCPv6 packet, but the traffic was IPv4. This is causing the crash seen.