conntrack & valgrind

conntrack & valgrind

[Gilad Benjamini]

Is conntrack supposed to be "valgrind clean" ?
I ran a few times "valgrind  --tool=memcheck --show-reachable=yes conntrack -L"
and I always get different "Invalid read of size " messages.

The messages always seem to appear before the first listed connection.
I tried to track this down in the code, and I suspect it has to do
with the NL message alignment in nfnl_step, but this is only a hunch.

conntrack & valgrind

[Gilad Benjamini]

Is conntrack supposed to be "valgrind clean" ?
I ran a few times "valgrind  --tool=memcheck --show-reachable=yes conntrack -L"
and I always get different "Invalid read of size " messages.

The messages always seem to appear before the first listed connection.
I tried to track this down in the code, and I suspect it has to do
with the NL message alignment in nfnl_step, but this is only a hunch.

Re: conntrack & valgrind

[Pablo Neira Ayuso]

Gilad Benjamini wrote:
> Is conntrack supposed to be "valgrind clean" ?
> I ran a few times "valgrind  --tool=memcheck --show-reachable=yes conntrack -L"
> and I always get different "Invalid read of size " messages.

# valgrind --tool=memcheck --show-reachable=yes conntrack -L
==15883== Memcheck, a memory error detector.
==15883== [...]
==15883==
tcp      6 [...]
==15883==
==15883== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 19 from 1)
==15883== malloc/free: in use at exit: 18 bytes in 1 blocks.
==15883== malloc/free: 19 allocs, 18 frees, 3,966 bytes allocated.
==15883== For counts of detected errors, rerun with: -v
==15883== searching for pointers to 1 not-freed blocks.
==15883== checked 100,072 bytes.
==15883==
==15883== LEAK SUMMARY:
==15883==    definitely lost: 0 bytes in 0 blocks.
==15883==      possibly lost: 0 bytes in 0 blocks.
==15883==    still reachable: 18 bytes in 1 blocks.
==15883==         suppressed: 0 bytes in 0 blocks.
==15883== Rerun with --leak-check=full to see details of leaked memory.

I can't reproduce the problem with current libraries and conntrack-tools 
SVN snapshots. Which version are you using?

--
Los honestos son inadaptados sociales -- Les Luthiers

Re: conntrack & valgrind

[Gilad Benjamini]

I am actually not sure what version combination I initially had. Some
mix-n-match.
I tried this on my Ubuntu, with the latest binary packages from
apt-get, and got the same errors.
I then tried downloading latest release (having some local problem
with snapshots)
conntrack-tools-0.9.5.tar.bz2
libnetfilter_conntrack-0.0.82.tar.bz2
libnfnetlink-0.0.30.tar.bz2
... and conntrack failed to compile ;-(

At this point I gave up. I'll wait for the next releases and try again

2008/1/10, Pablo Neira Ayuso <pablo@netfilter.org>:
> Gilad Benjamini wrote:
> > Is conntrack supposed to be "valgrind clean" ?
> > I ran a few times "valgrind  --tool=memcheck --show-reachable=yes conntrack -L"
> > and I always get different "Invalid read of size " messages.
>
> # valgrind --tool=memcheck --show-reachable=yes conntrack -L
> ==15883== Memcheck, a memory error detector.
> ==15883== [...]
> ==15883==
> tcp      6 [...]
> ==15883==
> ==15883== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 19 from 1)
> ==15883== malloc/free: in use at exit: 18 bytes in 1 blocks.
> ==15883== malloc/free: 19 allocs, 18 frees, 3,966 bytes allocated.
> ==15883== For counts of detected errors, rerun with: -v
> ==15883== searching for pointers to 1 not-freed blocks.
> ==15883== checked 100,072 bytes.
> ==15883==
> ==15883== LEAK SUMMARY:
> ==15883==    definitely lost: 0 bytes in 0 blocks.
> ==15883==      possibly lost: 0 bytes in 0 blocks.
> ==15883==    still reachable: 18 bytes in 1 blocks.
> ==15883==         suppressed: 0 bytes in 0 blocks.
> ==15883== Rerun with --leak-check=full to see details of leaked memory.
>
> I can't reproduce the problem with current libraries and conntrack-tools
> SVN snapshots. Which version are you using?
>
> --
> Los honestos son inadaptados sociales -- Les Luthiers
>

Re: conntrack & valgrind

[Pablo Neira Ayuso]

Gilad Benjamini wrote:
> I am actually not sure what version combination I initially had. Some
> mix-n-match.
> I tried this on my Ubuntu, with the latest binary packages from
> apt-get, and got the same errors.

Could you please tell me the version of the conntrack-tools and
libraries to reproduce the problem?

> I then tried downloading latest release (having some local problem
> with snapshots)
> conntrack-tools-0.9.5.tar.bz2
> libnetfilter_conntrack-0.0.82.tar.bz2
> libnfnetlink-0.0.30.tar.bz2
> ... and conntrack failed to compile ;-(
> 
> At this point I gave up. I'll wait for the next releases and try again

Well... where does it stop compiling? Probably you're missing some
dependencies to compile the packages.

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers