Description of problem: I executed the following command with ip-address pointing to an Avocent ACS6048 appliance. snmpstatus -v 3 -u user <ip-address> Version-Release number of selected component: net-snmp-utils-5.7.2-24.fc22 Additional info: reporter: libreport-2.5.1 backtrace_rating: 4 cmdline: snmpstatus -v 3 -u '' '' '' '' '' dresden-console crash_function: main executable: /usr/bin/snmpstatus global_pid: 13567 kernel: 4.0.4-303.fc22.x86_64 runlevel: N 5 type: CCpp uid: 1000 Truncated backtrace: Thread no. 1 (0 frames)
Created attachment 1040944 [details] File: backtrace
Created attachment 1040945 [details] File: cgroup
Created attachment 1040946 [details] File: core_backtrace
Created attachment 1040947 [details] File: dso_list
Created attachment 1040948 [details] File: environ
Created attachment 1040949 [details] File: limits
Created attachment 1040950 [details] File: maps
Created attachment 1040951 [details] File: mountinfo
Created attachment 1040952 [details] File: namespaces
Created attachment 1040953 [details] File: open_fds
Created attachment 1040954 [details] File: proc_pid_status
Created attachment 1040955 [details] File: var_log_messages
It seems that the SNMP agent sent some weird response. Can you reproduce the crash reliably? Please attach output of 'snmpstatus -Ddump <...>' when it crashes.
Yes, it crashes reliably. snmpstatus also crashes: % snmpstatus -Ddump -v 3 -u user dresden-console registered debug token dump, 1 dumph_send: SNMPv3 Message dumph_send: GET dumph_send: error index dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: error status dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: request_id dumpx_send: 02 04 2F 6F 41 BF dumpv_send: Integer: 795820479 (0x2F6F41BF) dumph_send: ScopedPdu dumph_send: contextName dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: contextEngineID dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgSecurityModel dumpx_send: 02 01 03 dumpv_send: Integer: 3 (0x03) dumph_send: msgFlags dumpx_send: 04 01 04 dumpv_send: String: . dumph_send: msgMaxSize dumpx_send: 02 03 00 FF E3 dumpv_send: Integer: 65507 (0xFFE3) dumph_send: msgID dumpx_send: 02 04 5E 6D 4D 1D dumpv_send: Integer: 1584221469 (0x5E6D4D1D) dumph_send: SNMP Version Number dumpx_send: 02 01 03 dumpv_send: Integer: 3 (0x03) dumph_send: SM msgSecurityParameters dumph_send: msgPrivacyParameters dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgAuthenticationParameters dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgUserName dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgAuthoritativeEngineTime dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: msgAuthoritativeEngineBoots dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: msgAuthoritativeEngineID dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_recv: SNMPv3 Message dumph_recv: SNMP Version Number dumpx_recv: 02 01 03 dumpv_recv: Integer: 3 (0x03) dumph_recv: msgGlobalData dumph_recv: msgID dumpx_recv: 02 04 5E 6D 4D 1D dumpv_recv: Integer: 1584221469 (0x5E6D4D1D) dumph_recv: msgMaxSize dumpx_recv: 02 03 00 FF E3 dumpv_recv: Integer: 65507 (0xFFE3) dumph_recv: msgFlags dumpx_recv: 04 01 00 dumpv_recv: String: . dumph_recv: msgSecurityModel dumpx_recv: 02 01 03 dumpv_recv: Integer: 3 (0x03) dumph_recv: SM msgSecurityParameters dumph_recv: msgAuthoritativeEngineID dumpx_recv: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_recv: String: ..(.....# , dumph_recv: msgAuthoritativeEngineBoots dumpx_recv: 02 01 01 dumpv_recv: Integer: 1 (0x01) dumph_recv: msgAuthoritativeEngineTime dumpx_recv: 02 01 1B dumpv_recv: Integer: 27 (0x1B) dumph_recv: msgUserName dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: msgAuthenticationParameters dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: msgPrivacyParameters dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: ScopedPDU dumph_recv: contextEngineID dumpx_recv: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_recv: String: ..(.....# , dumph_recv: contextName dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: REPORT dumpv_recv: Command REPORT dumph_recv: request_id dumpx_recv: 02 04 2F 6F 41 BF dumpv_recv: Integer: 795820479 (0x2F6F41BF) dumph_recv: error status dumpx_recv: 02 01 00 dumpv_recv: Integer: 0 (0x00) dumph_recv: error index dumpx_recv: 02 01 00 dumpv_recv: Integer: 0 (0x00) dumph_recv: VarBindList dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 0A 2B 06 01 06 03 0F 01 01 04 00 dumpv_recv: ObjID: SNMP-USER-BASED-SM-MIB::usmStatsUnknownEngineIDs.0 dumph_recv: Value dumpx_recv: 41 01 02 dumpv_recv: UInteger: 2 (0x02) dumph_send: SNMPv3 Message dumph_send: GET dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 08 2B 06 01 02 01 04 0A 00 dumpv_send: ObjID: IP-MIB::ipOutRequests.0 dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 08 2B 06 01 02 01 04 03 00 dumpv_send: ObjID: IP-MIB::ipInReceives.0 dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 08 2B 06 01 02 01 01 03 00 dumpv_send: ObjID: DISMAN-EVENT-MIB::sysUpTimeInstance dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 08 2B 06 01 02 01 01 01 00 dumpv_send: ObjID: SNMPv2-MIB::sysDescr.0 dumph_send: error index dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: error status dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: request_id dumpx_send: 02 04 2F 6F 41 BE dumpv_send: Integer: 795820478 (0x2F6F41BE) dumph_send: ScopedPdu dumph_send: contextName dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: contextEngineID dumpx_send: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_send: String: ..(.....# , dumph_send: msgSecurityModel dumpx_send: 02 01 03 dumpv_send: Integer: 3 (0x03) dumph_send: msgFlags dumpx_send: 04 01 04 dumpv_send: String: . dumph_send: msgMaxSize dumpx_send: 02 03 00 FF E3 dumpv_send: Integer: 65507 (0xFFE3) dumph_send: msgID dumpx_send: 02 04 5E 6D 4D 1C dumpv_send: Integer: 1584221468 (0x5E6D4D1C) dumph_send: SNMP Version Number dumpx_send: 02 01 03 dumpv_send: Integer: 3 (0x03) dumph_send: SM msgSecurityParameters dumph_send: msgPrivacyParameters dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgAuthenticationParameters dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgUserName dumpx_send: 04 04 75 73 65 72 dumpv_send: String: user dumph_send: msgAuthoritativeEngineTime dumpx_send: 02 01 1B dumpv_send: Integer: 27 (0x1B) dumph_send: msgAuthoritativeEngineBoots dumpx_send: 02 01 01 dumpv_send: Integer: 1 (0x01) dumph_send: msgAuthoritativeEngineID dumpx_send: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_send: String: ..(.....# , dumph_recv: SNMPv3 Message dumph_recv: SNMP Version Number dumpx_recv: 02 01 03 dumpv_recv: Integer: 3 (0x03) dumph_recv: msgGlobalData dumph_recv: msgID dumpx_recv: 02 04 5E 6D 4D 1C dumpv_recv: Integer: 1584221468 (0x5E6D4D1C) dumph_recv: msgMaxSize dumpx_recv: 02 03 00 FF E3 dumpv_recv: Integer: 65507 (0xFFE3) dumph_recv: msgFlags dumpx_recv: 04 01 00 dumpv_recv: String: . dumph_recv: msgSecurityModel dumpx_recv: 02 01 03 dumpv_recv: Integer: 3 (0x03) dumph_recv: SM msgSecurityParameters dumph_recv: msgAuthoritativeEngineID dumpx_recv: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_recv: String: ..(.....# , dumph_recv: msgAuthoritativeEngineBoots dumpx_recv: 02 01 01 dumpv_recv: Integer: 1 (0x01) dumph_recv: msgAuthoritativeEngineTime dumpx_recv: 02 01 1B dumpv_recv: Integer: 27 (0x1B) dumph_recv: msgUserName dumpx_recv: 04 04 75 73 65 72 dumpv_recv: String: user dumph_recv: msgAuthenticationParameters dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: msgPrivacyParameters dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: ScopedPDU dumph_recv: contextEngineID dumpx_recv: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_recv: String: ..(.....# , dumph_recv: contextName dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: RESPONSE dumpv_recv: Command RESPONSE dumph_recv: request_id dumpx_recv: 02 04 2F 6F 41 BE dumpv_recv: Integer: 795820478 (0x2F6F41BE) dumph_recv: error status dumpx_recv: 02 01 00 dumpv_recv: Integer: 0 (0x00) dumph_recv: error index dumpx_recv: 02 01 00 dumpv_recv: Integer: 0 (0x00) dumph_recv: VarBindList dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 08 2B 06 01 02 01 01 01 00 dumpv_recv: ObjID: SNMPv2-MIB::sysDescr.0 dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 08 2B 06 01 02 01 01 03 00 dumpv_recv: ObjID: DISMAN-EVENT-MIB::sysUpTimeInstance dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 08 2B 06 01 02 01 04 03 00 dumpv_recv: ObjID: IP-MIB::ipInReceives.0 dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 08 2B 06 01 02 01 04 0A 00 dumpv_recv: ObjID: IP-MIB::ipOutRequests.0 dumph_recv: Value [UDP: [10.44.67.5]:161->[0.0.0.0]:39092]=>[] Up: 0:00:00.00 dumph_send: SNMPv3 Message dumph_send: GETNEXT dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 09 2B 06 01 02 01 02 02 01 12 dumpv_send: ObjID: IF-MIB::ifOutNUcastPkts dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 09 2B 06 01 02 01 02 02 01 11 dumpv_send: ObjID: IF-MIB::ifOutUcastPkts dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 09 2B 06 01 02 01 02 02 01 0C dumpv_send: ObjID: IF-MIB::ifInNUcastPkts dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 09 2B 06 01 02 01 02 02 01 0B dumpv_send: ObjID: IF-MIB::ifInUcastPkts dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 09 2B 06 01 02 01 02 02 01 08 dumpv_send: ObjID: IF-MIB::ifOperStatus dumph_send: error index dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: error status dumpx_send: 02 01 00 dumpv_send: Integer: 0 (0x00) dumph_send: request_id dumpx_send: 02 04 2F 6F 41 C0 dumpv_send: Integer: 795820480 (0x2F6F41C0) dumph_send: ScopedPdu dumph_send: contextName dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: contextEngineID dumpx_send: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_send: String: ..(.....# , dumph_send: msgSecurityModel dumpx_send: 02 01 03 dumpv_send: Integer: 3 (0x03) dumph_send: msgFlags dumpx_send: 04 01 04 dumpv_send: String: . dumph_send: msgMaxSize dumpx_send: 02 03 00 FF E3 dumpv_send: Integer: 65507 (0xFFE3) dumph_send: msgID dumpx_send: 02 04 5E 6D 4D 1E dumpv_send: Integer: 1584221470 (0x5E6D4D1E) dumph_send: SNMP Version Number dumpx_send: 02 01 03 dumpv_send: Integer: 3 (0x03) dumph_send: SM msgSecurityParameters dumph_send: msgPrivacyParameters dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgAuthenticationParameters dumpx_send: 04 00 dumpv_send: String: [NULL] dumph_send: msgUserName dumpx_send: 04 04 75 73 65 72 dumpv_send: String: user dumph_send: msgAuthoritativeEngineTime dumpx_send: 02 01 1B dumpv_send: Integer: 27 (0x1B) dumph_send: msgAuthoritativeEngineBoots dumpx_send: 02 01 01 dumpv_send: Integer: 1 (0x01) dumph_send: msgAuthoritativeEngineID dumpx_send: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_send: String: ..(.....# , dumph_recv: SNMPv3 Message dumph_recv: SNMP Version Number dumpx_recv: 02 01 03 dumpv_recv: Integer: 3 (0x03) dumph_recv: msgGlobalData dumph_recv: msgID dumpx_recv: 02 04 5E 6D 4D 1E dumpv_recv: Integer: 1584221470 (0x5E6D4D1E) dumph_recv: msgMaxSize dumpx_recv: 02 03 00 FF E3 dumpv_recv: Integer: 65507 (0xFFE3) dumph_recv: msgFlags dumpx_recv: 04 01 00 dumpv_recv: String: . dumph_recv: msgSecurityModel dumpx_recv: 02 01 03 dumpv_recv: Integer: 3 (0x03) dumph_recv: SM msgSecurityParameters dumph_recv: msgAuthoritativeEngineID dumpx_recv: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_recv: String: ..(.....# , dumph_recv: msgAuthoritativeEngineBoots dumpx_recv: 02 01 01 dumpv_recv: Integer: 1 (0x01) dumph_recv: msgAuthoritativeEngineTime dumpx_recv: 02 01 1B dumpv_recv: Integer: 27 (0x1B) dumph_recv: msgUserName dumpx_recv: 04 04 75 73 65 72 dumpv_recv: String: user dumph_recv: msgAuthenticationParameters dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: msgPrivacyParameters dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: ScopedPDU dumph_recv: contextEngineID dumpx_recv: 04 0B 80 00 28 B2 03 00 E0 86 23 09 2C dumpv_recv: String: ..(.....# , dumph_recv: contextName dumpx_recv: 04 00 dumpv_recv: String: dumph_recv: RESPONSE dumpv_recv: Command RESPONSE dumph_recv: request_id dumpx_recv: 02 04 2F 6F 41 C0 dumpv_recv: Integer: 795820480 (0x2F6F41C0) dumph_recv: error status dumpx_recv: 02 01 00 dumpv_recv: Integer: 0 (0x00) dumph_recv: error index dumpx_recv: 02 01 00 dumpv_recv: Integer: 0 (0x00) dumph_recv: VarBindList dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 09 2B 06 01 02 01 02 02 01 08 dumpv_recv: ObjID: IF-MIB::ifOperStatus dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 09 2B 06 01 02 01 02 02 01 0B dumpv_recv: ObjID: IF-MIB::ifInUcastPkts dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 09 2B 06 01 02 01 02 02 01 0C dumpv_recv: ObjID: IF-MIB::ifInNUcastPkts dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 09 2B 06 01 02 01 02 02 01 11 dumpv_recv: ObjID: IF-MIB::ifOutUcastPkts dumph_recv: Value dumph_recv: VarBind dumph_recv: Name dumpx_recv: 06 09 2B 06 01 02 01 02 02 01 12 dumpv_recv: ObjID: IF-MIB::ifOutNUcastPkts dumph_recv: Value zsh: segmentation fault (core dumped) snmpstatus -Ddump -v 3 -u user dresden-console
Thanks for the logs! dumph_send: VarBind dumph_send: Value dumpx_send: 05 00 dumpv_send: NULL dumph_send: Name dumpx_send: 06 09 2B 06 01 02 01 02 02 01 08 dumpv_send: ObjID: IF-MIB::ifOperStatus This is violation of RFC 2863, ifOperStatus has type INTEGER and not NULL. snmpstatus does not expect that. I'll make sure it does not crash, but it won't produce meaningful output either.
Fix pushed upstream: https://sourceforge.net/p/net-snmp/code/ci/bec6243394ed78897c14e3fa46f934e0ea3d453e/
net-snmp-5.7.3-5.fc22 has been submitted as an update for Fedora 22. https://admin.fedoraproject.org/updates/net-snmp-5.7.3-5.fc22
Package net-snmp-5.7.3-5.fc22: * should fix your issue, * was pushed to the Fedora 22 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing net-snmp-5.7.3-5.fc22' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2015-10845/net-snmp-5.7.3-5.fc22 then log in and leave karma (feedback).
net-snmp-5.7.3-5.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
Actually, the problem should have been detected earlier, in the GET request, which is getting a non-error response but with no values in the varbind. I created a bug report upstream for this: https://sourceforge.net/p/net-snmp/bugs/2653/