Title
#general
j

jby

12/14/2020, 12:41 PM
Should osqueryd really crash with this message when the receiving server is unavailable?
kernel: osqueryd[239994]: segfault at 98 ip 000055c73482a52d sp 00007ffe287a95f0 error 4 in osqueryd[55c7347da000+1065000]
Stefano Bonicatti

Stefano Bonicatti

12/14/2020, 12:44 PM
@jby osquery should not crash, definitely. What version that is, which platform/distro?
j

jby

12/14/2020, 12:45 PM
4.5.1 on Fedora 33
Stefano Bonicatti

Stefano Bonicatti

12/14/2020, 12:47 PM
If you are able to reproduce it consistently, could you share the steps and would you be able to install the debug symbols to get us a stack trace with gdb? That would greatly help!
j

jby

12/14/2020, 12:48 PM
Steps are: • Configure osqueryd to report to a fleetdm-instance • Try to start osqueryd • Crash Sure, I’ll run a debug for you if you want
12:49 PM
Oh, it works fine in Fedora 30, 31 & 32 so I guess it’s something to do with Fedora 33