Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Nov 2006 14:45:47 -0500
From:      Kris Kennaway <kris@obsecurity.org>
To:        Vincent Blondel <vincent@xtra-net.org>
Cc:        freebsd-stable@freebsd.org, kris@obsecurity.org
Subject:   Re: kernel crash ...
Message-ID:  <20061118194547.GB40675@xor.obsecurity.org>
In-Reply-To: <1163873942.3315.12.camel@wbemfkaa.net.xtra-net.be>
References:  <1163621364.85632.12.camel@wbemfkaa.net.xtra-net.be> <1163692748.2792.10.camel@wbemfkaa.net.xtra-net.be> <20061116161706.GB65054@xor.obsecurity.org> <1163695124.2792.16.camel@wbemfkaa.net.xtra-net.be> <20061116210151.GA68673@xor.obsecurity.org> <1163712849.8157.5.camel@wbemfkaa.net.xtra-net.be> <20061116214237.GA69412@xor.obsecurity.org> <1163780080.2697.6.camel@wbemfkaa.net.xtra-net.be> <20061117223140.GA13858@xor.obsecurity.org> <1163873942.3315.12.camel@wbemfkaa.net.xtra-net.be>

next in thread | previous in thread | raw e-mail | index | archive | help

--BwCQnh7xodEAoBMC
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Nov 18, 2006 at 07:19:02PM +0100, Vincent Blondel wrote:

> > If you don't know about mailwrapper running, that suggests you're not
> > using the system for email processing and it's the nightly admin
> > scripts which are sending mail automatically overnight.
>=20
> No I just forgot the existence of mailwrapper but as I said it in my
> last mail /etc/mail/mailer.conf points to /var/qmail/bin/sendmail on my
> machine because qmail is serving SMTP on my web server.

OK.

> Concerning nightly scripts, I receive them in my mailbox every
> day/week/month.
>=20
> >=20
> > I suspect that your mailwrapper executable may be corrupt.  The kernel
> > is supposed to handle this, but you might have discovered a new and
> > better way to corrupt a binary to get it past the existing checks :-)
>=20
> Do not forget my original post concerned a kernel panic on process httpd
> so maybe problem does not come from mailwrapper ?

I did forget because it got trimmed somehow :-)

> > If it does, then save a copy of the mailwrapper binary (i.e. don't
> > immediately "fix" it by reinstalling) and make it available so we can
> > see what is wrong with it.
>=20
> but I still get a new crash this morning at 09h20 AM and when I try to
> get kgdb running I get hundreds of lines with this ...
>=20
>  kgdb: kvm_read: invalid address (0x0)
>  ...

This means you are running it against the wrong kernel.

Kris

--BwCQnh7xodEAoBMC
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)

iD8DBQFFX2LrWry0BWjoQKURAh5XAKCHAo5gzwiEaAG/LpFjU8ExHEn95wCfQniS
TPoo7sRuhQddOu6e9zRrXlw=
=mZzI
-----END PGP SIGNATURE-----

--BwCQnh7xodEAoBMC--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061118194547.GB40675>