aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJesús Daniel Colmenares Oviedo <dtxdf@FreeBSD.org>2026-01-06 05:41:36 +0000
committerJesús Daniel Colmenares Oviedo <dtxdf@FreeBSD.org>2026-01-06 23:54:49 +0000
commitd3c13b6b24ec7d9be58f0ebd3a2c7d0a2e7b7d79 (patch)
tree371a8f52edd329c9187a5b827e918074998abd30
parentc74ab75450040f0367851979ff46cd64d74d6a1f (diff)
security/wazuh-manager: Fix SIGSEGV when modulesd is starting
When modulesd stops while decompressing the vulnerability detection database, it accesses an uninitialized structure, causing a SIGSEGV. Approved by: acm@
-rw-r--r--security/wazuh-manager/Makefile2
-rw-r--r--security/wazuh-manager/files/patch-src_wazuh_modules_vulnerability_scanner_src_vulnerabilityScannerFacade.cpp14
2 files changed, 15 insertions, 1 deletions
diff --git a/security/wazuh-manager/Makefile b/security/wazuh-manager/Makefile
index 3d9d2e467c60..28ab424fa460 100644
--- a/security/wazuh-manager/Makefile
+++ b/security/wazuh-manager/Makefile
@@ -1,7 +1,7 @@
PORTNAME= wazuh
DISTVERSIONPREFIX= v
DISTVERSION= 4.14.1
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= security
MASTER_SITES= https://packages.wazuh.com/deps/47/libraries/sources/:wazuh_sources \
LOCAL/acm/${PORTNAME}/:wazuh_cache
diff --git a/security/wazuh-manager/files/patch-src_wazuh_modules_vulnerability_scanner_src_vulnerabilityScannerFacade.cpp b/security/wazuh-manager/files/patch-src_wazuh_modules_vulnerability_scanner_src_vulnerabilityScannerFacade.cpp
new file mode 100644
index 000000000000..4346aaddb52e
--- /dev/null
+++ b/security/wazuh-manager/files/patch-src_wazuh_modules_vulnerability_scanner_src_vulnerabilityScannerFacade.cpp
@@ -0,0 +1,14 @@
+--- src/wazuh_modules/vulnerability_scanner/src/vulnerabilityScannerFacade.cpp.orig 2026-01-02 14:42:42.202277000 -0400
++++ src/wazuh_modules/vulnerability_scanner/src/vulnerabilityScannerFacade.cpp 2026-01-02 14:48:18.703476000 -0400
+@@ -641,7 +641,10 @@
+
+ // Reset shared pointers
+ m_indexerConnector.reset();
+- m_databaseFeedManager->teardown();
++ if (m_databaseFeedManager)
++ {
++ m_databaseFeedManager->teardown();
++ }
+ m_databaseFeedManager.reset();
+ m_syscollectorRsyncSubscription.reset();
+ m_syscollectorDeltasSubscription.reset();