[Lognorm] Is liblognorm ( libee, libestr, etc) thread safe?

Champ Clark III cclark at quadrantsec.com
Fri May 4 22:35:17 CEST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just tried it with/without mutexs,  and this happens.

[Switching to Thread 0xb6355b70 (LWP 4226)]
ee_getBucketField (bucket=0xb42106f8, name=0xb4210458) at
fieldbucket.c:112
112                     if(!es_strcmp(name, node->field->name))
(gdb) bt
#0  ee_getBucketField (bucket=0xb42106f8, name=0xb4210458) at
fieldbucket.c:112
#1  0xb7f00a62 in ee_getEventField (event=0xb4210408, name=0xb4210458)
at event.c:175
#2  0xb7ff07f8 in sagan_normalize_liblognorm (config=0xb8015038,
debug=0xb8015028,
    syslog_msg=0xb80165a4 " error (unexpected RCODE REFUSED) resolving
'180.70.7.107.in-addr.arpa/PTR/IN': 72.243.168.246#53") at
sagan-liblognorm.c:127
#3  0xb7ffaedd in sagan_websense (SyslogPthread=0xb8016420) at
preprocessors/sagan-websense.c:63
#4  0xb7ff06aa in sagan_preprocessor (SyslogPthread=0xb8016420) at
sagan-preprocessor.c:45
#5  0xb7bcecf2 in start_thread () from /lib/libpthread.so.0
#6  0xb7afae0e in clone () from /lib/libc.so.6


On 5/4/12 4:16 PM, Champ Clark III wrote:
> 
> Does anyone know if liblognorm (and the associated libs) are 
> considered "thread" safe.  I need to move some normalization to a 
> pthread,  and was just curious.   Any pointers would be great.
> 
> _______________________________________________ Lognorm mailing
> list Lognorm at lists.adiscon.com 
> http://lists.adiscon.net/mailman/listinfo/lognorm

- -- 
- - Champ Clark III (cclark at quadrantsec.com)
  Quadrant Information Security (http://quadrantsec.com)
  Key Fingerprint: 2E56 C2EB 1B25 C517 D5BA 2DCF 5E70 B2F8 0381 878A
  GPG Key ID: 0381878A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPpD2FAAoJENnmXt7Lmc3K4JUIAIYHViKrN7KxICc7zOBZWHKb
+huvzhvMJcmFWxY68rkggv5lWvPawJf0sbzCF3Gc7TZEbPugpcd3IPx+DQS1d5SG
YhMId21I+hYuGzDALa7VMno3ieZWzLzt2fQx0EpnmeFdu21LxDq+SN7HEopqL+Yy
Rn7HAYEBHVpyrRKuAwIY8O7E/cgNaFCjjhWujkNlKHSk+kQJvYnOih4doK6+GgPc
XPhCg2f9a4j5yYdZP+23F7kR09pYF2yeoiSCcoTPeWIygWJN42cUT9bejk/JuchW
AkkZNma1nXtL5u9UZnYLr+r9G0iAkhl0cVX3a4Ny/kVAYeU7VMAInJC6YdWLCNo=
=z3SD
-----END PGP SIGNATURE-----


More information about the Lognorm mailing list