[Pkg-nagios-devel] Bug#895813: nagios-nrpe-plugin: "corrupted size" when checking NSClient++ NRPE server on i386 architecture
Samuel Bizien Filippi
s.bizien-filippi at aptm.fr
Mon Apr 16 11:36:05 BST 2018
Package: nagios-nrpe-plugin
Version: 3.2.1-1~bpo9+1
Severity: grave
Tags: upstream
Justification: causes non-serious data loss
Dear Maintainer,
When using:
- check_nrpe (v3.0.1 from stretch as well as v3.2.1 from stetch-backports) on i386 architecture
- NSClient++ on server side (NSClient++ v0.5.2.39 on Windows x86_64)
- TLS encryption for the communication
e.g. running the command line :
/usr/lib/nagios/plugins/check_nrpe -H checked-windows.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
The check_nrpe fails with the message :
*** Error in `/usr/lib/nagios/plugins/check_nrpe': corrupted size vs. prev_size: 0x004320b8 ***
(and a backtrace, and not the output expected)
Note that the same program works with :
- check_nrpe running on x86_64 architecture
- OR disabling TLS encryption
- OR using nagios-nrpe-server on the server side
When setting the environment variable MALLOC_CHECK_=2, it displays the expected output (at least from the package rebuilt with debug symbols), but then aborts with return code 134.
I attach with the bug reports the backtrace from gdb and packet captures as follows :
$ /usr/lib/nagios/plugins/check_nrpe -H checked-debian.aptm.local -n -c check_load
OK - load average: 0.08, 0.19, 0.25|load1=0.080;15.000;30.000;0; load5=0.190;10.000;25.000;0; load15=0.250;5.000;20.000;0;
-> nrpe_nagios.pcap
$ /usr/lib/nagios/plugins/check_nrpe -H checked-windows.aptm.local -c check_cpu
OK: CPU load is ok.|'total 5m'=0%;80;90 'total 1m'=0%;80;90 'total 5s'=0%;80;90
-> nrpe_nsclient.pcap
$ /usr/lib/nagios/plugins/check_nrpe -H checked-debian.aptm.local -c check_load -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
OK - load average: 0.17, 0.15, 0.14|load1=0.170;15.000;30.000;0; load5=0.150;10.000;25.000;0; load15=0.140;5.000;20.000;0;
-> nrpe_nagios_tls.pcap
$ /usr/lib/nagios/plugins/check_nrpe -H checked-windows.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
*** Error in `/usr/lib/nagios/plugins/check_nrpe': corrupted size vs. prev_size: 0x022530b8 ***
[...]
-> nrpe_nsclient_tls.pcap
Also note that when building the package from the sources with fakeroot apt-get -b source -t stretch-backports nagios-nrpe-plugin, the compiler warns about incompatible types:
./check_nrpe.c:1352:79: warning: format ‘%ld’ expects argument of type ‘long int’, but argument 3 has type ‘unsigned int’ [-Wformat=]
printf("CHECK_NRPE: Receive header underflow - only %d bytes received (%ld expected).\n", rc, sizeof(bytes_to_recv));
[similar message for lines 1424:71, 1440:79, 1529:70, 1531:73]
... but applying the patch to correct that little problem (attached) does not resolve the problem exhibited here.
Attached :
- command-lines : different test cases, showing which one fails
- dbg.log containing the traces from gdb (without and with MALLOC_CHECK_=2)
- *.pcap : network traces of communication (the failing case is nrpe_nsclient_tls.pcap)
- ca.crt/client_checke{r,d}.{key,crt} : PKI used for the tests, if you want to reproduce.
- check_nrpe-printf.patch : correct the printf statements in check_nrpe.c (may be useful, but does not solve this problem).
Thanks for the follow-up,
Samuel Bizien Filippi.
-- System Information:
Debian Release: 9.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 4.9.0-6-686-pae (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages nagios-nrpe-plugin depends on:
ii libc6 2.24-11+deb9u3
ii libssl1.1 1.1.0f-3+deb9u2
nagios-nrpe-plugin recommends no packages.
nagios-nrpe-plugin suggests no packages.
-- no debconf information
-------------- next part --------------
$ /usr/lib/nagios/plugins/check_nrpe -H checked-debian.aptm.local -n -c check_load
OK - load average: 0.08, 0.19, 0.25|load1=0.080;15.000;30.000;0; load5=0.190;10.000;25.000;0; load15=0.250;5.000;20.000;0;
-> nrpe_nagios.pcap
$ /usr/lib/nagios/plugins/check_nrpe -H checked-windows.aptm.local -c check_cpu
OK: CPU load is ok.|'total 5m'=0%;80;90 'total 1m'=0%;80;90 'total 5s'=0%;80;90
-> nrpe_nsclient.pcap
$ /usr/lib/nagios/plugins/check_nrpe -H checked-debian.aptm.local -c check_load -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
OK - load average: 0.17, 0.15, 0.14|load1=0.170;15.000;30.000;0; load5=0.150;10.000;25.000;0; load15=0.140;5.000;20.000;0;
-> nrpe_nagios_tls.pcap
$ /usr/lib/nagios/plugins/check_nrpe -H checked-windows.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
*** Error in `/usr/lib/nagios/plugins/check_nrpe': corrupted size vs. prev_size: 0x022530b8 ***
[...]
-> nrpe_nsclient_tls.pcap
-------------- next part --------------
$ dbg /usr/lib/nagios/plugins/check_nrpe
GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/lib/nagios/plugins/check_nrpe...done.
(gdb) set pagination 0
(gdb) run -H checked-windows.aptm.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt
The program being debugged has been started already.
Start it from the beginning? (y or n) y
Starting program: /usr/lib/nagios/plugins/check_nrpe -H adm-09.aptm.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
*** Error in `/usr/lib/nagios/plugins/check_nrpe': corrupted size vs. prev_size: 0x004320b8 ***
======= Backtrace: =========
/lib/i386-linux-gnu/libc.so.6(+0x6738a)[0xb7b8c38a]
/lib/i386-linux-gnu/libc.so.6(+0x6dfc7)[0xb7b92fc7]
/lib/i386-linux-gnu/libc.so.6(+0x6f082)[0xb7b94082]
/usr/lib/i386-linux-gnu/libcrypto.so.1.1(CRYPTO_free+0x39)[0xb7e16b39]
/usr/lib/i386-linux-gnu/libcrypto.so.1.1(EVP_CIPHER_CTX_free+0x2c)[0xb7e08c5c]
/usr/lib/i386-linux-gnu/libssl.so.1.1(+0x27d47)[0xb7f84d47]
/usr/lib/i386-linux-gnu/libssl.so.1.1(+0x28c88)[0xb7f85c88]
/usr/lib/i386-linux-gnu/libssl.so.1.1(SSL_free+0xfd)[0xb7f85f7d]
/usr/lib/nagios/plugins/check_nrpe(+0x4675)[0x404675]
/usr/lib/nagios/plugins/check_nrpe(main+0x170)[0x401da0]
/lib/i386-linux-gnu/libc.so.6(__libc_start_main+0xf6)[0xb7b3d286]
/usr/lib/nagios/plugins/check_nrpe(+0x1af1)[0x401af1]
======= Memory map: ========
00400000-0040a000 r-xp 00000000 08:01 1833904 /usr/lib/nagios/plugins/check_nrpe
0040b000-0040c000 r--p 0000a000 08:01 1833904 /usr/lib/nagios/plugins/check_nrpe
0040c000-0040d000 rw-p 0000b000 08:01 1833904 /usr/lib/nagios/plugins/check_nrpe
0040d000-00442000 rw-p 00000000 00:00 0 [heap]
b7900000-b7921000 rw-p 00000000 00:00 0
b7921000-b7a00000 ---p 00000000 00:00 0
b7aa8000-b7ac4000 r-xp 00000000 08:01 2094295 /lib/i386-linux-gnu/libgcc_s.so.1
b7ac4000-b7ac5000 r--p 0001b000 08:01 2094295 /lib/i386-linux-gnu/libgcc_s.so.1
b7ac5000-b7ac6000 rw-p 0001c000 08:01 2094295 /lib/i386-linux-gnu/libgcc_s.so.1
b7acf000-b7ae3000 r-xp 00000000 08:01 2095506 /lib/i386-linux-gnu/libresolv-2.24.so
b7ae3000-b7ae4000 r--p 00013000 08:01 2095506 /lib/i386-linux-gnu/libresolv-2.24.so
b7ae4000-b7ae5000 rw-p 00014000 08:01 2095506 /lib/i386-linux-gnu/libresolv-2.24.so
b7ae5000-b7ae7000 rw-p 00000000 00:00 0
b7ae7000-b7aec000 r-xp 00000000 08:01 2094613 /lib/i386-linux-gnu/libnss_dns-2.24.so
b7aec000-b7aed000 r--p 00004000 08:01 2094613 /lib/i386-linux-gnu/libnss_dns-2.24.so
b7aed000-b7aee000 rw-p 00005000 08:01 2094613 /lib/i386-linux-gnu/libnss_dns-2.24.so
b7aee000-b7af9000 r-xp 00000000 08:01 2095368 /lib/i386-linux-gnu/libnss_files-2.24.so
b7af9000-b7afa000 r--p 0000a000 08:01 2095368 /lib/i386-linux-gnu/libnss_files-2.24.so
b7afa000-b7afb000 rw-p 0000b000 08:01 2095368 /lib/i386-linux-gnu/libnss_files-2.24.so
b7afb000-b7b01000 rw-p 00000000 00:00 0
b7b01000-b7b03000 rw-p 00000000 00:00 0
b7b03000-b7b1c000 r-xp 00000000 08:01 2095504 /lib/i386-linux-gnu/libpthread-2.24.so
b7b1c000-b7b1d000 r--p 00018000 08:01 2095504 /lib/i386-linux-gnu/libpthread-2.24.so
b7b1d000-b7b1e000 rw-p 00019000 08:01 2095504 /lib/i386-linux-gnu/libpthread-2.24.so
b7b1e000-b7b20000 rw-p 00000000 00:00 0
b7b20000-b7b23000 r-xp 00000000 08:01 2094031 /lib/i386-linux-gnu/libdl-2.24.so
b7b23000-b7b24000 r--p 00002000 08:01 2094031 /lib/i386-linux-gnu/libdl-2.24.so
b7b24000-b7b25000 rw-p 00003000 08:01 2094031 /lib/i386-linux-gnu/libdl-2.24.so
b7b25000-b7cd6000 r-xp 00000000 08:01 2094025 /lib/i386-linux-gnu/libc-2.24.so
b7cd6000-b7cd8000 r--p 001b0000 08:01 2094025 /lib/i386-linux-gnu/libc-2.24.so
b7cd8000-b7cd9000 rw-p 001b2000 08:01 2094025 /lib/i386-linux-gnu/libc-2.24.so
b7cd9000-b7cdc000 rw-p 00000000 00:00 0
b7cdc000-b7cf2000 r-xp 00000000 08:01 2094037 /lib/i386-linux-gnu/libnsl-2.24.so
b7cf2000-b7cf3000 r--p 00016000 08:01 2094037 /lib/i386-linux-gnu/libnsl-2.24.so
b7cf3000-b7cf4000 rw-p 00017000 08:01 2094037 /lib/i386-linux-gnu/libnsl-2.24.so
b7cf4000-b7cf6000 rw-p 00000000 00:00 0
b7cf6000-b7f41000 r-xp 00000000 08:01 1702943 /usr/lib/i386-linux-gnu/libcrypto.so.1.1
b7f41000-b7f42000 ---p 0024b000 08:01 1702943 /usr/lib/i386-linux-gnu/libcrypto.so.1.1
b7f42000-b7f53000 r--p 0024b000 08:01 1702943 /usr/lib/i386-linux-gnu/libcrypto.so.1.1
b7f53000-b7f5a000 rw-p 0025c000 08:01 1702943 /usr/lib/i386-linux-gnu/libcrypto.so.1.1
b7f5a000-b7f5d000 rw-p 00000000 00:00 0
b7f5d000-b7fc4000 r-xp 00000000 08:01 1702944 /usr/lib/i386-linux-gnu/libssl.so.1.1
b7fc4000-b7fc7000 r--p 00066000 08:01 1702944 /usr/lib/i386-linux-gnu/libssl.so.1.1
b7fc7000-b7fcb000 rw-p 00069000 08:01 1702944 /usr/lib/i386-linux-gnu/libssl.so.1.1
b7fd3000-b7fd7000 rw-p 00000000 00:00 0
b7fd7000-b7fd9000 r--p 00000000 00:00 0 [vvar]
b7fd9000-b7fdb000 r-xp 00000000 00:00 0 [vdso]
b7fdb000-b7ffe000 r-xp 00000000 08:01 2094015 /lib/i386-linux-gnu/ld-2.24.so
b7ffe000-b7fff000 r--p 00022000 08:01 2094015 /lib/i386-linux-gnu/ld-2.24.so
b7fff000-b8000000 rw-p 00023000 08:01 2094015 /lib/i386-linux-gnu/ld-2.24.so
bffdf000-c0000000 rw-p 00000000 00:00 0 [stack]
Program received signal SIGABRT, Aborted.
0xb7fd9cf9 in __kernel_vsyscall ()
(gdb) bt
#0 0xb7fd9cf9 in __kernel_vsyscall ()
#1 0xb7b50dd0 in __libc_signal_restore_set (set=0xbfffef80) at ../sysdeps/unix/sysv/linux/nptl-signals.h:79
#2 __GI_raise (sig=6) at ../sysdeps/unix/sysv/linux/raise.c:48
#3 0xb7b52297 in __GI_abort () at abort.c:89
#4 0xb7b8c38f in __libc_message (do_abort=<optimized out>, fmt=<optimized out>) at ../sysdeps/posix/libc_fatal.c:175
#5 0xb7b92fc7 in malloc_printerr (action=<optimized out>, str=0xb7c82cc6 "corrupted size vs. prev_size", ptr=<optimized out>, ar_ptr=0xb7cd8780 <main_arena>) at malloc.c:5049
#6 0xb7b94082 in _int_free (av=0xb7cd8780 <main_arena>, p=0x431ab8, have_lock=0) at malloc.c:4052
#7 0xb7e16b39 in CRYPTO_free () from /usr/lib/i386-linux-gnu/libcrypto.so.1.1
#8 0xb7e08c5c in EVP_CIPHER_CTX_free () from /usr/lib/i386-linux-gnu/libcrypto.so.1.1
#9 0xb7f84d47 in ?? () from /usr/lib/i386-linux-gnu/libssl.so.1.1
#10 0xb7f85c88 in ?? () from /usr/lib/i386-linux-gnu/libssl.so.1.1
#11 0xb7f85f7d in SSL_free () from /usr/lib/i386-linux-gnu/libssl.so.1.1
#12 0x00404675 in read_response () at ./check_nrpe.c:1238
#13 0x00401da0 in main (argc=11, argv=0xbffff5b4) at ./check_nrpe.c:174
(gdb)
$ MALLOC_CHECK_=2 dbg /usr/lib/nagios/plugins/check_nrpe
GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/lib/nagios/plugins/check_nrpe...done.
(gdb) set pagination 0
(gdb) run -H checked-windows.aptm.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
Starting program: /usr/lib/nagios/plugins/check_nrpe -H adm-09.aptm.local -c check_cpu -A ca.crt -K client-checker.key -C client-checker.crt -S TLSv1.2
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
OK: CPU load is ok.|'total 5m'=1%;80;90 'total 1m'=1%;80;90 'total 5s'=1%;80;90
Program received signal SIGABRT, Aborted.
0xb7fd9cf9 in __kernel_vsyscall ()
(gdb) bt
#0 0xb7fd9cf9 in __kernel_vsyscall ()
#1 0xb7b50dd0 in __libc_signal_restore_set (set=0xbffff1e0) at ../sysdeps/unix/sysv/linux/nptl-signals.h:79
#2 __GI_raise (sig=6) at ../sysdeps/unix/sysv/linux/raise.c:48
#3 0xb7b52297 in __GI_abort () at abort.c:89
#4 0xb7b92ff9 in malloc_printerr (action=<optimized out>, str=<optimized out>, ptr=<optimized out>, ar_ptr=0xb7cd8780 <main_arena>) at malloc.c:5053
#5 0xb7b9713a in __GI___libc_free (mem=0x435690) at malloc.c:2957
#6 0x004049a4 in read_response () at ./check_nrpe.c:1330
#7 0x00401e22 in main (argc=13, argv=0xbffff594) at ./check_nrpe.c:197
-------------- next part --------------
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-------------- next part --------------
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-------------- next part --------------
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
-------------- next part --------------
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-------------- next part --------------
-----BEGIN PRIVATE KEY-----
MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQChsJZYQtu0MIXK
t4AWSCc4B4XOApDzhCHXRsQVfAyszeW9iqCfLy79kL0PDT4SOL8FKfGweRrUXaeN
DyGw+O8VLxKPyYyLY1UehGuXg32rFyxYXon1hIX6xbLpN7A7K47XeWrm92Xe4sm7
bvsZ+D72huv351l9VYdeDAxaCZYZ8D0BTNxiFvJ90rrxTsxrucKjbKMILnDuo2JG
6pCwdFYGUUTGku6bgPONC6ICR8GbiB5bfIQiBAy+2WrKI/MI6M34Tq8JQ2WMJzPR
C42H7YbzN5XxJI7Ut0yzzjv7ONdcoFMnwmMZTwqtzPc4N1tTfWjgX6Srr6168x8/
HLS8gJxtAgMBAAECggEBAJtQjkrABl1jEtG0TOSacJngmAZY7rYMYZlyD573pxFD
QwE8LahbYY8Ovpy7wrksK0mhjdlPq5b9U5orQ9jEdpxpuDHIkCnAxB3pY5SKKWf0
fZNxVKIzp6NIzuA5rx5XbAHNTwQH96IPRWq3Y5sBnDGhTv+2Cn9bbgnIFwFSHg5Q
8FPpaTpzRWtCahkNlr4siMNlC2gcxLuZ6GWMPBegfYgJCHp5io9zwDRRPACquQKz
bJ7zzCrpfmraUY/MJX95psmCGQiw9AKRUioe6A6l/gmR7pj1v8Zn90Fm8rzUgJ7u
Bu8As6INLmx+3ioFiM3IC4a1o4H4LTIwuAKBqFNnJMECgYEA1k7vmaN0Z6qb60C3
6iOwqvqZwfbmNBgssBN3irHuCYqJXfeghU2B/AqTyHSfy0a1gvdNqbV61wOfC0u8
2hMjjiC4jNFs7fVaZxeGnLd8NF3vuGqtTVXTvg4DpjZZOKXBzBTFRD8ko3ir6y6t
kUypINfWrvc7PQuzrGXDiqJNh9ECgYEAwSUfapr2Gg7iBt7jV/OLT5tlmJ4eEYLw
TS67z8abhXUdEJPidliWhxP7oeY2xZSBvBSi0V52ji5S7+2bbKJpAd8nnIYYEtjO
dsj1qPTaqLnjQTZnFZfCxSuL86uKylitgI0lBMhgFmYa6oRwIU4j85W1NO7OhCGe
Q093STDQzd0CgYEAuDesUGYoNsB6PNQqA9NgFulJ6Gii457wMv7Y4Fkoo/z5LdQh
oNTKamxxMnvFrEgA2S5aDQraKB+NxHj7Qn33L0JDQZD4UOh6KGoZpXc4Bg/Fc8IH
bJXdaN7FFkhbk40wtIwaMhsRFJAzP/uk6WR7cab3fPk6a7Q2Y3gqiW4QtTECgYEA
oQfCWa844CDocbIC+aEj1QtKeSPbDd6NWsxL6b88ithJkzi45tKVLamLcj/uCmz2
fUj3Nnf7gC8/FqqTms8NnXHgJK/oAk6gVIjXyDXc2C+jOQuShn4w9RKJbG7pGCs2
/Kaw5nvpIMOgTUZ99kaf0sZOfgNcSu18dcIbQfphHEECgYBDd/a3l5Yxsdhggrw1
4WSgx58tYLPB8uqiq5t3WZMEWP4fUmyu9eZXo9oexsrsKagcldTNwVxjvoiBcS+Q
FXpE/a4S8ZjFq1uvkiyfscoWMJyar1Pm52bfcb3onyXsom2OBr4t+UNPC3UFGoPZ
79PdRTIMnVYRpbr1Nr7ESGQwEg==
-----END PRIVATE KEY-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nrpe_nagios.pcap
Type: application/vnd.tcpdump.pcap
Size: 1950 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-nagios-devel/attachments/20180416/fa4e17d6/attachment.pcap>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nrpe_nagios_tls.pcap
Type: application/vnd.tcpdump.pcap
Size: 5781 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-nagios-devel/attachments/20180416/fa4e17d6/attachment-0001.pcap>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nrpe_nsclient.pcap
Type: application/vnd.tcpdump.pcap
Size: 5676 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-nagios-devel/attachments/20180416/fa4e17d6/attachment-0002.pcap>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nrpe_nsclient_tls.pcap
Type: application/vnd.tcpdump.pcap
Size: 6859 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-nagios-devel/attachments/20180416/fa4e17d6/attachment-0003.pcap>
-------------- next part --------------
1352c1352
< printf("CHECK_NRPE: Receive header underflow - only %d bytes received (%ld expected).\n", rc, sizeof(bytes_to_recv));
---
> printf("CHECK_NRPE: Receive header underflow - only %d bytes received (%u expected).\n", rc, sizeof(bytes_to_recv));
1424c1424
< printf("CHECK_NRPE: Receive underflow - only %d bytes received (%ld expected).\n", rc, sizeof(buffer_size));
---
> printf("CHECK_NRPE: Receive underflow - only %d bytes received (%u expected).\n", rc, sizeof(buffer_size));
1440c1440
< printf("CHECK_NRPE: Receive header underflow - only %d bytes received (%ld expected).\n", rc, sizeof(bytes_to_recv));
---
> printf("CHECK_NRPE: Receive header underflow - only %d bytes received (%u expected).\n", rc, sizeof(bytes_to_recv));
1529c1529
< printf("CHECK_NRPE: Receive buffer size - %ld bytes received (%ld expected).\n", (long)bytes_read, sizeof(buffer_size));
---
> printf("CHECK_NRPE: Receive buffer size - %ld bytes received (%u expected).\n", (long)bytes_read, sizeof(buffer_size));
1531c1531
< printf("CHECK_NRPE: Receive underflow - only %ld bytes received (%ld expected).\n", (long)bytes_read, sizeof(buffer_size));
---
> printf("CHECK_NRPE: Receive underflow - only %ld bytes received (%u expected).\n", (long)bytes_read, sizeof(buffer_size));
More information about the Pkg-nagios-devel
mailing list