Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Nmap Development: Re: 4.22SOC8 Bug Report (scan_engine.c)

Re: 4.22SOC8 Bug Report (scan_engine.c)

From: David Fifield <david_at_bamsoftware.com>
Date: Sun, 4 Nov 2007 10:50:32 -0700

On Sun, Nov 04, 2007 at 11:33:27AM -0600, Kris Katterjohn wrote:
> On 11/3/07, J0hn McClane <john.mcclame_at_gmail.com> wrote:
> > nmap-dev,
> >
> > Uname: Linux 2.6.22-14-generic #1 SMP Sun Oct 14 23:05:12 GMT 2007 i686
> > GNU/Linux
> > Ubuntu 7.10 (gusty)
> >
> > Nmap 4.22SOC8 compiled from src, reliably reproduces the following error
> > given the following options.
> >
> > sudo nmap -sT -T2 -oA tcp-connect-scan 10.0.0.0/24
> >
> > Starting Nmap 4.22SOC8 ( http://insecure.org ) at 2007-11-03 19:53 CST
> > nmap: scan_engine.cc:2868: void sendPingProbe(UltraScanInfo*,
> > HostScanStats*): Assertion `0' failed.
> > Aborted (core dumped)
> >
> > Starting Nmap 4.22SOC8 ( http://insecure.org ) at 2007-11-03 19:55 CST
> > nmap: scan_engine.cc:2868: void sendPingProbe(UltraScanInfo*,
> > HostScanStats*): Assertion `0' failed.
> > Aborted (core dumped)
> >
> > Starting Nmap 4.22SOC8 ( http://insecure.org ) at 2007-11-03 19:59 CST
> > nmap: scan_engine.cc:2868: void sendPingProbe(UltraScanInfo*,
> > HostScanStats*): Assertion `0' failed.
> > Aborted (core dumped)
>
> I was able to reproduce this, and I've attached a patch that fixes it for me.
>
> Between 4.20 and now, "Global Pings" have been implemented. This is
> where it seemed to occur. Nmap would send a global ping for ARP,
> which called a sendPingProbe() function which didn't have any code
> regarding ARP, hence the assertion failure.

That's exactly right. Your patch looks good, please commit it.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Nov 04 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]