Chercheprocess Erreur fatal: exception non interceptée

loreleil · Février 21, 2016, 1:52pm

Salut,

Bonsoir François,

Cela fait plusieurs semaines que roundcube me retourne aléatoirement cet erreur.

Dois-je pour autant m’en inquiéter outre-mesure ?

Une rapide recherche me conduit ici.

lists.debian.org/debian-user-fre … 00859.html
pl.digipedia.org/usenet/thread/18354/88019/

[root@yunohost] ~ # chercheprocess
Recherche de processus cach�s F.Boisson Dec2003
...\
0 processus cach�(s) trouv�(s)
[root@yunohost] ~ #

~ # strace /usr/bin/regarde
execve("/usr/bin/regarde", ["/usr/bin/regarde"], [/* 22 vars */]) = 0
brk(0)                                  = 0x9bad000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7726000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=22933, ...}) = 0
mmap2(NULL, 22933, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7720000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/i686/cmov/libm.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`4\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=149392, ...}) = 0
mmap2(NULL, 151680, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb76fa000
mmap2(0xb771e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x23) = 0xb771e000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/i686/cmov/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0n\1\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1327556, ...}) = 0
mmap2(NULL, 1337704, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb75b3000
mprotect(0xb76f3000, 4096, PROT_NONE)   = 0
mmap2(0xb76f4000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x140) = 0xb76f4000
mmap2(0xb76f7000, 10600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb76f7000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb75b2000
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb75b1000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb75b2b20, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0xb76f4000, 8192, PROT_READ)   = 0
mprotect(0xb771e000, 4096, PROT_READ)   = 0
mprotect(0xb7744000, 4096, PROT_READ)   = 0
munmap(0xb7720000, 22933)               = 0
open("/usr/bin/regarde", O_RDONLY)      = 3
read(3, "\177E", 2)                     = 2
lseek(3, -20, SEEK_END)                 = 63155
read(3, "\0\0\23\214\0\0\6<\0\0\0\0\0\0\0\0CL07", 20) = 20
mmap2(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7590000
brk(0)                                  = 0x9bad000
brk(0x9bd2000)                          = 0x9bd2000
mmap2(NULL, 270336, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb754e000
lseek(3, -6620, SEEK_END)               = 56555
read(3, "\6\16\0\37\7\6\0\2\24\0=\2\25\0=\4\363\377\3\26\0\6\20\0?\37I \23\4\0\10"..., 5004) = 5004
read(3, "\204\225\246\272\0\0\1\215\0c\3\0\1\0\0\0\1\0\0\0\1\0\0\0\1\0\0\0\1\0\0\0"..., 4096) = 1616
close(3)                                = 0
chdir("/proc")                          = 0
open("1/task", O_RDONLY)                = 3
close(3)                                = 0
open("1", O_RDONLY)                     = 3
close(3)                                = 0
open(".", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 3
fcntl64(3, F_GETFD)                     = 0x1 (flags FD_CLOEXEC)
getdents(3, /* 191 entries */, 32768)   = 3356
getdents(3, /* 0 entries */, 32768)     = 0
close(3)                                = 0
open("1/task", O_RDONLY)                = 3
close(3)                                = 0
open("1/task", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 3
getdents(3, /* 3 entries */, 32768)     = 48
getdents(3, /* 0 entries */, 32768)     = 0
close(3)                                = 0
open("2/task", O_RDONLY)                = 3
close(3)                                = 0


...


open("5787", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5788", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5789", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5790", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5791", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5792", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5793", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5794", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5795", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5796", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5797", O_RDONLY)                  = -1 ENOENT (No such file or directory)
open("5798", O_RDONLY)                  = -1 ENOENT (No such file or directory)

...

~ # regarde 2> /tmp/sortie.err

/tmp # ls -lAh --time-style=long-iso
total 1,6M

-rw-r--r-- 1 root     root        0 2012-12-10 16:00 sortie.err

~ # strace -f -o strace.log /usr/bin/regarde

le fichier strace.log étant imposant j’éviterai le mp <user.anti-spam …>

~ # ls -lAh --time-style=long-iso
...
-rw-r--r--  1 root root  14M 2012-12-10 16:02 strace.log

[root@yunohost] ~ # chkrootkit
...
Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:
/usr/lib/pymodules/python2.6/.path /lib/init/rw/.mdadm /lib/init/rw/.ramfs
...
Checking `bindshell'...                                     INFECTED (PORTS:  465 4369)
...

[root@yunohost] ~ #
[root@yunohost] ~ # netstat -lnp | grep .*465.*LISTEN
tcp        0      0 0.0.0.0:465             0.0.0.0:*               LISTEN      2656/master
[root@yunohost] ~ #
[root@yunohost] ~ # netstat -lnp | grep .*4369.*LISTEN
tcp        0      0 0.0.0.0:4369            0.0.0.0:*               LISTEN      2464/epmd
[root@yunohost] ~ #

[root@yunohost] ~ # ps auwex | grep -w [2]656
root      2656  0.0  0.0   6296  1768 ?        Ss   Nov23   0:06 /usr/lib/postfix/master MAIL_CONFIG=/etc/postfix data_directory=/var/lib/postfix sample_directory=/usr/share/doc/postfix/examples setgid_group=postdrop sendmail_path=/usr/sbin/sendmail mailq_path=/usr/bin/mailq manpage_directory=/usr/share/man readme_directory=no newaliases_path=/usr/bin/newaliases PATH=/bin:/usr/bin:/sbin:/usr/sbin PWD=/var/spool/postfix queue_directory=/var/spool/postfix LANG=C mail_owner=postfix daemon_directory=/usr/lib/postfix SHLVL=1 config_directory=/etc/postfix MAIL_LOGTAG=postfix html_directory=no command_directory=/usr/sbin OLDPWD=/etc/postfix _=/usr/lib/postfix/master
[root@yunohost] ~ #

[root@yunohost] ~ # ps auwex | grep -w [2]464
ejabberd  2464  0.0  0.0   1876   332 ?        S    Nov23   0:06 /usr/lib/erlang/erts-5.8/bin/epmd -daemon CONSOLE=/dev/console EMU=beam TERM=linux SHELL=/bin/sh rootmnt=/root TMPDIR=/tmp/user/115 BINDIR=/usr/lib/erlang/erts-5.8/bin USER=ejabberd INIT_VERSION=sysvinit-2.88 ROOTDIR=/usr/lib/erlang init=/sbin/init COLUMNS=80 PATH=/usr/lib/erlang/erts-5.8/bin:/usr/lib/erlang/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games MAIL=/var/mail/ejabberd RUNLEVEL=2 runlevel=2 PWD=/ VERBOSE=no PROGNAME=erl PREVLEVEL=N previous=N LINES=25 ERL_CRASH_DUMP=/var/log/ejabberd/erl_crash.dump HOME=/var/lib/ejabberd SHLVL=4 BOOT_IMAGE=/boot/vmlinuz-2.6.32-5-686 LANGUAGE=fr_FR:fr TMP=/tmp/user/115 LOGNAME=ejabberd _=/usr/lib/erlang/erts-5.8/bin/epmd
[root@yunohost] ~ #

~ # uname -a
Linux yunohost 2.6.32-5-686 #1 SMP Sun Sep 23 09:49:36 UTC 2012 i686 GNU/Linux

loreleil · Février 21, 2016, 1:56pm

Salut,

J’ai dû procéder à une restauration. Avant cette dernière j’avais accepté une maj de perl, une mise à jour des plus banales (aucun bug)

Or, après cette restauration un update et upgrade, m’offre de nouveau une maj de perl, normal quoi, sauf que cette dernière me déclare un bug que j’ai dûment pinner via apt-listbug

[quote]Explanation: Pinned by apt-listbugs at Fri Dec 13 17:23:32 +0100 2012
Explanation: #695224: perl-modules: Locale::Maketext code injection
Package: perl-modules
Pin: version 5.10.1-17squeeze3
Pin-Priority: 1000[/quote]

Les alertes chercheprocess semblent ne plus être.

Il y aurait il une relation avec perl ?

loreleil · Février 21, 2016, 1:56pm

Salut,

Perdu!

Aujourd’hui 14:00 et 17:00

fran.b · Février 21, 2016, 1:56pm

Hum, bizarre je viens de voir ça, tu as quelle version de cacheproc? En tout état de cause, les open /proc/??? NOENTRYsont normaux.

Peux tu m’envoyer le résultat du strace?

PS/ J’ai eu du mal à percuter, J’utilise moins chercheprocess que regarde…

loreleil · Février 21, 2016, 1:56pm

Salut,

Pas trop le choix sur la version, non …

~ # acp cacheproc cacheproc: Installé : 1.1 Candidat : 1.1 Table de version : *** 1.1 0 500 http://boisson.homeip.net/debian/ squeeze/divers i386 Packages 100 /var/lib/dpkg/status [root@yunohost] ~ #

Un retour complet de strace ? Ici ?

[quote=“fran.b”]Hum, bizarre je viens de voir ça …
PS/ J’ai eu du mal à percuter, J’utilise moins chercheprocess que regarde…[/quote]
J’ai vu ça … r.orange.fr

fran.b · Février 21, 2016, 1:56pm

Que donne les 50 dernières lignes du strace?

loreleil · Février 21, 2016, 1:56pm

[code][root@yunohost] ~ # tail -n50 strace.log

11604 open(“65487”, O_RDONLY) 11604 open(“65488”, O_RDONLY) 11604 open(“65489”, O_RDONLY) 11604 open(“65490”, O_RDONLY) 11604 open(“65491”, O_RDONLY) 11604 open(“65492”, O_RDONLY) 11604 open(“65493”, O_RDONLY) 11604 open(“65494”, O_RDONLY) 11604 open(“65495”, O_RDONLY) 11604 open(“65496”, O_RDONLY) 11604 open(“65497”, O_RDONLY) 11604 open(“65498”, O_RDONLY) 11604 open(“65499”, O_RDONLY) 11604 open(“65500”, O_RDONLY) 11604 open(“65501”, O_RDONLY) 11604 open(“65502”, O_RDONLY) 11604 open(“65503”, O_RDONLY) 11604 open(“65504”, O_RDONLY) 11604 open(“65505”, O_RDONLY) 11604 open(“65506”, O_RDONLY) 11604 open(“65507”, O_RDONLY) 11604 open(“65508”, O_RDONLY) 11604 open(“65509”, O_RDONLY) 11604 open(“65510”, O_RDONLY) 11604 open(“65511”, O_RDONLY) 11604 open(“65512”, O_RDONLY) 11604 open(“65513”, O_RDONLY) 11604 open(“65514”, O_RDONLY) 11604 open(“65515”, O_RDONLY) 11604 open(“65516”, O_RDONLY) 11604 open(“65517”, O_RDONLY) 11604 open(“65518”, O_RDONLY) 11604 open(“65519”, O_RDONLY) 11604 open(“65520”, O_RDONLY) 11604 open(“65521”, O_RDONLY) 11604 open(“65522”, O_RDONLY) 11604 open(“65523”, O_RDONLY) 11604 open(“65524”, O_RDONLY) 11604 open(“65525”, O_RDONLY) 11604 open(“65526”, O_RDONLY) 11604 open(“65527”, O_RDONLY) 11604 open(“65528”, O_RDONLY) 11604 open(“65529”, O_RDONLY) 11604 open(“65530”, O_RDONLY) 11604 open(“65531”, O_RDONLY) 11604 open(“65532”, O_RDONLY) 11604 open(“65533”, O_RDONLY) 11604 open(“65534”, O_RDONLY) 11604 open(“65535”, O_RDONLY) 11604 exit_group(0) [root@yunohost] ~ # [/code] = -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= -1 ENOENT (No such file or directory)
= ?

fran.b · Février 21, 2016, 1:56pm

Ouaip donc chercheprocess se termine normalement par un exit(0). C’est vraiment étonnant. Je dois partir mais je vais y reflechir…

loreleil · Février 21, 2016, 1:59pm

Suppression, nettoyage, et nouvelle installation il y a quatre jours.

Même souci à cette heure.

fran.b · Février 21, 2016, 1:59pm

Peux tu essayer avec /usr/bin/regarde au lieu de /usr/bin/chercheprocess?
Ce dernier fabrique une très longue ligne pour les effets (je réécris sans arrêt …\ puis …| puis …/, …-, …\ etc avec un chaque fois un retour chariot (\r ou encore 0x0d) à la fin. Je me demande si ça n’est pas ça?

J’ai soupconné un souci de mémoire mais le programme nes’ pas sous camllight mais ocaml qui est sûr. J’avoue que je ne vois pas où pourrait être l’erreur d’autant que le programme se termine normalement. Je soupconne donc un souci dans la redirection. Passer par regarde supprimerait ce souci dans ce cas.

regarde = chercheprocess sans les fioritures