Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Development: Re: 4.22SOC8 Bug Report (scan_engine.c)

Re: 4.22SOC8 Bug Report (scan_engine.c)

From: Kris Katterjohn <katterjohn_at_gmail.com>
Date: Sun, 4 Nov 2007 11:33:27 -0600

On 11/3/07, J0hn McClane <john.mcclame_at_gmail.com> wrote:
> nmap-dev,
>
> Uname: Linux 2.6.22-14-generic #1 SMP Sun Oct 14 23:05:12 GMT 2007 i686
> GNU/Linux
> Ubuntu 7.10 (gusty)
>
> Nmap 4.22SOC8 compiled from src, reliably reproduces the following error
> given the following options.
>
> sudo nmap -sT -T2 -oA tcp-connect-scan 10.0.0.0/24
>
> Starting Nmap 4.22SOC8 ( http://insecure.org ) at 2007-11-03 19:53 CST
> nmap: scan_engine.cc:2868: void sendPingProbe(UltraScanInfo*,
> HostScanStats*): Assertion `0' failed.
> Aborted (core dumped)
>
> Starting Nmap 4.22SOC8 ( http://insecure.org ) at 2007-11-03 19:55 CST
> nmap: scan_engine.cc:2868: void sendPingProbe(UltraScanInfo*,
> HostScanStats*): Assertion `0' failed.
> Aborted (core dumped)
>
> Starting Nmap 4.22SOC8 ( http://insecure.org ) at 2007-11-03 19:59 CST
> nmap: scan_engine.cc:2868: void sendPingProbe(UltraScanInfo*,
> HostScanStats*): Assertion `0' failed.
> Aborted (core dumped)
>

I was able to reproduce this, and I've attached a patch that fixes it for me.

Between 4.20 and now, "Global Pings" have been implemented. This is
where it seemed to occur. Nmap would send a global ping for ARP,
which called a sendPingProbe() function which didn't have any code
regarding ARP, hence the assertion failure.

Can you try this patch out?

I would commit it, but I'd prefer David and/or Fyodor to take a look
to make sure it's the Right Thing to do.

Thanks,
Kris Katterjohn

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

Received on Nov 04 2007
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]