-
Notifications
You must be signed in to change notification settings - Fork 42
Description
I'm using Python version of Yaramod library to parse Yara rulesets.
I have a really large rule (1.4MB file). Parsing this file goes ok, but, when I try to access YaraFile object, I get segmentation fault.
This is log from journal when crash occurs:
kernel: python3.9[21615]: segfault at 7f4166ffef88 ip 00007f4152ebb182 sp 00007f4166ffef90 error 6 in yaramod.cpython-39-x86_64-linux-gnu.so[7f4152c6b000+3d1000]
kernel: Code: 3c 06 0f 85 b8 05 00 00 48 8b 76 08 0f b6 d2 e8 44 ff ff ff eb c2 66 90 48 8d 47 10 48 89 07 48 8b 76 08 48 8b 55 10 48 01 f2 f9 ed ff ff eb a7 0f 1f 80 00 00 00 00 48 8b 45 08 4c 8d 64 24
systemd[1]: Started Process Core Dump (PID 21670/UID 0).
systemd-coredump[21671]: Resource limits disable core dumping for process 21585 (python3.9).
systemd-coredump[21671]: Process 21585 (python3.9) of user 1000 dumped core.
systemd[1]: systemd-coredump@2-21670-0.service: Succeeded.