{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/osquery/issues/1237","labels_url":"https://api.github.com/repos/facebook/osquery/issues/1237/labels{/name}","comments_url":"https://api.github.com/repos/facebook/osquery/issues/1237/comments","events_url":"https://api.github.com/repos/facebook/osquery/issues/1237/events","html_url":"https://github.com/facebook/osquery/issues/1237","id":90468433,"number":1237,"title":"Querying certificates table on OS X results in segmentation fault","user":{"login":"mwielgoszewski","id":359029,"avatar_url":"https://avatars.githubusercontent.com/u/359029?v=3","gravatar_id":"","url":"https://api.github.com/users/mwielgoszewski","html_url":"https://github.com/mwielgoszewski","followers_url":"https://api.github.com/users/mwielgoszewski/followers","following_url":"https://api.github.com/users/mwielgoszewski/following{/other_user}","gists_url":"https://api.github.com/users/mwielgoszewski/gists{/gist_id}","starred_url":"https://api.github.com/users/mwielgoszewski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mwielgoszewski/subscriptions","organizations_url":"https://api.github.com/users/mwielgoszewski/orgs","repos_url":"https://api.github.com/users/mwielgoszewski/repos","events_url":"https://api.github.com/users/mwielgoszewski/events{/privacy}","received_events_url":"https://api.github.com/users/mwielgoszewski/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/facebook/osquery/labels/triage","name":"triage","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-06-23T19:15:05Z","updated_at":"2015-06-24T01:03:06Z","closed_at":null,"body":"Querying the certificates table on OS X Yosemite (fully patched as of this writing), results in a segmentation fault.\r\n\r\n```\r\n$ osqueryi --verbose \"select * from certificates;\"\r\nI0623 15:11:14.411964 1969820416 init.cpp:193] osquery initialized [version=1.4.7]\r\nI0623 15:11:14.412111 1969820416 extensions.cpp:169] Could not autoload modules: Failed reading: /etc/osquery/modules.load\r\nI0623 15:11:14.412189 1969820416 db_handle.cpp:115] Opening RocksDB handle: /Users/marcin/.osquery/shell.db\r\nSegmentation fault: 11\r\n```\r\n\r\nSee crash dump below:\r\n\r\n```\r\nProcess:               osqueryi [93976]\r\nPath:                  /usr/local/Cellar/osquery/1.4.7/bin/osqueryi\r\nIdentifier:            osqueryi\r\nVersion:               0\r\nCode Type:             X86-64 (Native)\r\nParent Process:        bash [89752]\r\nResponsible:           Terminal [89749]\r\nUser ID:               501\r\n\r\nDate/Time:             2015-06-23 14:56:03.021 -0400\r\nOS Version:            Mac OS X 10.10.3 (14D136)\r\nReport Version:        11\r\nAnonymous UUID:        5E5DA76F-0243-2328-7DB6-B59BB5E1BD64\r\n\r\nSleep/Wake UUID:       8BEF4EC4-ED0C-4C06-9C79-97EAEB685011\r\n\r\nTime Awake Since Boot: 420000 seconds\r\nTime Since Wake:       17000 seconds\r\n\r\nCrashed Thread:        0  Dispatch queue: com.apple.main-thread\r\n\r\nException Type:        EXC_BAD_ACCESS (SIGSEGV)\r\nException Codes:       KERN_INVALID_ADDRESS at 0x0000000000000000\r\n\r\nVM Regions Near 0:\r\n--> \r\n    __TEXT                 000000010b01b000-000000010b409000 [ 4024K] r-x/rwx SM=COW  /usr/local/Cellar/osquery/1.4.7/bin/osqueryi\r\n\r\nThread 0 Crashed:: Dispatch queue: com.apple.main-thread\r\n0   com.apple.CoreFoundation      \t0x00007fff84e702e3 CFDictionaryContainsKey + 35\r\n1   osqueryi                      \t0x000000010b1b8079 osquery::tables::CreatePropertyFromCertificate(OpaqueSecCertificateRef* const&, void const* const&) + 103\r\n2   osqueryi                      \t0x000000010b198147 osquery::tables::genCertificate(OpaqueSecCertificateRef* const&, std::__1::vector<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > >, std::__1::allocator<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > > >&) + 119\r\n3   osqueryi                      \t0x000000010b19882e osquery::tables::genCerts(osquery::QueryContext&) + 736\r\n4   osqueryi                      \t0x000000010b204b7e osquery::certificatesTablePlugin::generate(osquery::QueryContext&) + 36\r\n5   osqueryi                      \t0x000000010b0c3cf6 osquery::TablePlugin::call(std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > const&, std::__1::vector<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > >, std::__1::allocator<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > > >&) + 698\r\n6   osqueryi                      \t0x000000010b1286f3 osquery::RegistryHelperCore::call(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > const&, std::__1::vector<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > >, std::__1::allocator<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > > >&) + 97\r\n7   osqueryi                      \t0x000000010b1299f0 osquery::RegistryFactory::call(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > const&, std::__1::vector<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > >, std::__1::allocator<std::__1::map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > > >&) + 80\r\n8   osqueryi                      \t0x000000010b196896 osquery::tables::xFilter(sqlite3_vtab_cursor*, int, char const*, int, Mem**) + 751\r\n9   osqueryi                      \t0x000000010b08a26d sqlite3VdbeExec + 4525\r\n10  osqueryi                      \t0x000000010b02f549 sqlite3_step + 473\r\n11  osqueryi                      \t0x000000010b022595 shell_exec(char const*, int (*)(void*, int, char**, char**, int*), callback_data*, char**) + 297\r\n12  osqueryi                      \t0x000000010b023751 process_input(callback_data*, __sFILE*) + 1261\r\n13  osqueryi                      \t0x000000010b02139d osquery::launchIntoShell(int, char**) + 1219\r\n14  osqueryi                      \t0x000000010b0262d6 main + 177\r\n15  libdyld.dylib                 \t0x00007fff87d055c9 start + 1\r\n\r\nThread 1:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 2:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 3:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 4:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 5:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b31f07c boost::condition_variable::do_wait_until(boost::unique_lock<boost::mutex>&, timespec const&) + 76\r\n2   osqueryi                      \t0x000000010b31db6e boost::this_thread::hiden::sleep_until(timespec const&) + 78\r\n3   osqueryi                      \t0x000000010b0e2346 osquery::interruptableSleep(unsigned long) + 248\r\n4   osqueryi                      \t0x000000010b109441 osquery::ExtensionWatcher::start() + 27\r\n5   osqueryi                      \t0x000000010b31ce35 boost::(anonymous namespace)::thread_proxy(void*) + 53\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n7   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n8   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 6:\r\n0   libsystem_kernel.dylib        \t0x00007fff854925c2 poll + 10\r\n1   osqueryi                      \t0x000000010b2138ae apache::thrift::transport::TServerTransport::accept() + 24\r\n2   osqueryi                      \t0x000000010b212837 apache::thrift::server::TThreadPoolServer::serve() + 971\r\n3   osqueryi                      \t0x000000010b11386f osquery::ExtensionRunnerCore::startServer(boost::shared_ptr<apache::thrift::TProcessor>) + 559\r\n4   osqueryi                      \t0x000000010b113d90 osquery::ExtensionManagerRunner::start() + 364\r\n5   osqueryi                      \t0x000000010b31ce35 boost::(anonymous namespace)::thread_proxy(void*) + 53\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n7   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n8   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 7:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 8:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 9:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 10:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b215162 apache::thrift::concurrency::Monitor::Impl::wait(long long) const + 18\r\n2   osqueryi                      \t0x000000010b20bcc2 apache::thrift::concurrency::ThreadManager::Worker::run() + 394\r\n3   osqueryi                      \t0x000000010b215707 apache::thrift::concurrency::PthreadThread::threadMain(void*) + 109\r\n4   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n5   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n6   libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 11:\r\n0   libsystem_kernel.dylib        \t0x00007fff8548c4de mach_msg_trap + 10\r\n1   libsystem_kernel.dylib        \t0x00007fff8548b64f mach_msg + 55\r\n2   com.apple.CoreFoundation      \t0x00007fff84e90eb4 __CFRunLoopServiceMachPort + 212\r\n3   com.apple.CoreFoundation      \t0x00007fff84e9037b __CFRunLoopRun + 1371\r\n4   com.apple.CoreFoundation      \t0x00007fff84e8fbd8 CFRunLoopRunSpecific + 296\r\n5   com.apple.CoreFoundation      \t0x00007fff84f47671 CFRunLoopRun + 97\r\n6   osqueryi                      \t0x000000010b143692 osquery::FSEventsEventPublisher::run() + 68\r\n7   osqueryi                      \t0x000000010b0f07b4 osquery::EventFactory::run(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 540\r\n8   osqueryi                      \t0x000000010b0f375b boost::detail::thread_data<boost::_bi::bind_t<osquery::Status, osquery::Status (*)(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), boost::_bi::list1<boost::_bi::value<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > >::run() + 43\r\n9   osqueryi                      \t0x000000010b31ce35 boost::(anonymous namespace)::thread_proxy(void*) + 53\r\n10  libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n11  libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n12  libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 12:\r\n0   libsystem_kernel.dylib        \t0x00007fff8548c4de mach_msg_trap + 10\r\n1   libsystem_kernel.dylib        \t0x00007fff8548b64f mach_msg + 55\r\n2   com.apple.CoreFoundation      \t0x00007fff84e90eb4 __CFRunLoopServiceMachPort + 212\r\n3   com.apple.CoreFoundation      \t0x00007fff84e9037b __CFRunLoopRun + 1371\r\n4   com.apple.CoreFoundation      \t0x00007fff84e8fbd8 CFRunLoopRunSpecific + 296\r\n5   com.apple.CoreFoundation      \t0x00007fff84f47671 CFRunLoopRun + 97\r\n6   osqueryi                      \t0x000000010b146544 osquery::IOKitHIDEventPublisher::run() + 68\r\n7   osqueryi                      \t0x000000010b0f07b4 osquery::EventFactory::run(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 540\r\n8   osqueryi                      \t0x000000010b0f375b boost::detail::thread_data<boost::_bi::bind_t<osquery::Status, osquery::Status (*)(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), boost::_bi::list1<boost::_bi::value<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > >::run() + 43\r\n9   osqueryi                      \t0x000000010b31ce35 boost::(anonymous namespace)::thread_proxy(void*) + 53\r\n10  libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n11  libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n12  libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 13:\r\n0   libsystem_kernel.dylib        \t0x00007fff85491136 __psynch_cvwait + 10\r\n1   osqueryi                      \t0x000000010b31f07c boost::condition_variable::do_wait_until(boost::unique_lock<boost::mutex>&, timespec const&) + 76\r\n2   osqueryi                      \t0x000000010b31db6e boost::this_thread::hiden::sleep_until(timespec const&) + 78\r\n3   osqueryi                      \t0x000000010b0ec403 osquery::publisherSleep(unsigned long) + 248\r\n4   osqueryi                      \t0x000000010b147f12 osquery::SCNetworkEventPublisher::run() + 78\r\n5   osqueryi                      \t0x000000010b0f07b4 osquery::EventFactory::run(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 540\r\n6   osqueryi                      \t0x000000010b0f375b boost::detail::thread_data<boost::_bi::bind_t<osquery::Status, osquery::Status (*)(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), boost::_bi::list1<boost::_bi::value<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > > >::run() + 43\r\n7   osqueryi                      \t0x000000010b31ce35 boost::(anonymous namespace)::thread_proxy(void*) + 53\r\n8   libsystem_pthread.dylib       \t0x00007fff8bbb3268 _pthread_body + 131\r\n9   libsystem_pthread.dylib       \t0x00007fff8bbb31e5 _pthread_start + 176\r\n10  libsystem_pthread.dylib       \t0x00007fff8bbb141d thread_start + 13\r\n\r\nThread 14:: Dispatch queue: com.apple.libdispatch-manager\r\n0   libsystem_kernel.dylib        \t0x00007fff85492232 kevent64 + 10\r\n1   libdispatch.dylib             \t0x00007fff8d21da6a _dispatch_mgr_thread + 52\r\n\r\nThread 15:\r\n0   libsystem_kernel.dylib        \t0x00007fff8549194a __workq_kernreturn + 10\r\n1   libsystem_pthread.dylib       \t0x00007fff8bbb140d start_wqthread + 13\r\n\r\nThread 16:\r\n0   libsystem_kernel.dylib        \t0x00007fff8549194a __workq_kernreturn + 10\r\n1   libsystem_pthread.dylib       \t0x00007fff8bbb140d start_wqthread + 13\r\n\r\nThread 17:\r\n0   libsystem_kernel.dylib        \t0x00007fff8549194a __workq_kernreturn + 10\r\n1   libsystem_pthread.dylib       \t0x00007fff8bbb140d start_wqthread + 13\r\n\r\nThread 18:\r\n0   libsystem_kernel.dylib        \t0x00007fff8549194a __workq_kernreturn + 10\r\n1   libsystem_pthread.dylib       \t0x00007fff8bbb140d start_wqthread + 13\r\n\r\nThread 0 crashed with X86 Thread State (64-bit):\r\n  rax: 0x0000000000000001  rbx: 0x0000000000000000  rcx: 0x00000000001f8100  rdx: 0x00000000000a1890\r\n  rdi: 0x0000000000000000  rsi: 0x00007fff767f1ae0  rbp: 0x00007fff54be2bc0  rsp: 0x00007fff54be2ba0\r\n   r8: 0x0000000000000003   r9: 0x00007fa764800000  r10: 0x0000000000000040  r11: 0x00007fa764800000\r\n  r12: 0x00007fff54be2d70  r13: 0x340016a737cc14d2  r14: 0x00007fff767f1ae0  r15: 0x00007fa76250e728\r\n  rip: 0x00007fff84e702e3  rfl: 0x0000000000010246  cr2: 0x0000000000000000\r\n  \r\nLogical CPU:     2\r\nError Code:      0x00000004\r\nTrap Number:     14\r\n\r\n\r\nBinary Images:\r\n       0x10b01b000 -        0x10b408fff +osqueryi (0) <2F48A8B1-2F0B-3B42-B595-BBE44E53E067> /usr/local/bin/osqueryi\r\n       0x10b6de000 -        0x10b84f487 +libcrypto.1.0.0.dylib (0) <316D0757-732D-3442-8829-2B526048B832> /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib\r\n       0x10b8cc000 -        0x10b90afff +libssl.1.0.0.dylib (0) <D3B7CFC1-CBCF-3B3B-B396-CDDB11BA887B> /usr/local/opt/openssl/lib/libssl.1.0.0.dylib\r\n       0x10b92c000 -        0x10b94afff  libedit.3.dylib (40) <6049084C-478A-3A89-A9A1-E641B5F8C1A7> /usr/lib/libedit.3.dylib\r\n       0x10c577000 -        0x10c582fff  com.apple.iokit.IOHIDLib (2.0.0 - 2.0.0) <F02FEFEC-1005-3DBC-919E-3BD31B273684> /System/Library/Extensions/IOHIDFamily.kext/Contents/PlugIns/IOHIDLib.plugin/Contents/MacOS/IOHIDLib\r\n    0x7fff68fc1000 -     0x7fff68ff7837  dyld (353.2.1) <65DCCB06-339C-3E25-9702-600A28291D0E> /usr/lib/dyld\r\n    0x7fff84e1e000 -     0x7fff851b6ff7  com.apple.CoreFoundation (6.9 - 1153.18) <5C0892B8-9691-341F-9279-CA3A74D59AA0> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation\r\n    0x7fff851e0000 -     0x7fff851faff7  com.apple.Kerberos (3.0 - 1) <7760E0C2-A222-3709-B2A6-B692D900CEB1> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos\r\n    0x7fff8532a000 -     0x7fff85335ff7  com.apple.speech.synthesis.framework (5.3.3 - 5.3.3) <A5640275-E2A6-3856-95EF-5F0DC440B10C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis\r\n    0x7fff853a1000 -     0x7fff853aafff  libGFXShared.dylib (11.1.2) <0BAF2EA8-3BC4-3BF4-ABB6-A6E0A1F3F6A5> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib\r\n    0x7fff8547b000 -     0x7fff85498fff  libsystem_kernel.dylib (2782.20.48) <EAFD7BD0-0C30-3E7D-9528-F9916BA0167C> /usr/lib/system/libsystem_kernel.dylib\r\n    0x7fff854fb000 -     0x7fff85508ff7  libbz2.1.0.dylib (36) <2DF83FBC-5C08-39E1-94F5-C28653791B5F> /usr/lib/libbz2.1.0.dylib\r\n    0x7fff856d7000 -     0x7fff856dcffb  libheimdal-asn1.dylib (398.10.1) <A7B6447A-6680-3625-83C3-993B58D5C43F> /usr/lib/libheimdal-asn1.dylib\r\n    0x7fff85838000 -     0x7fff858b6fff  com.apple.CoreServices.OSServices (640.4 - 640.4) <20121A5E-7AB5-3624-8CF0-3562F97C8A95> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices\r\n    0x7fff859d2000 -     0x7fff859e0ff7  com.apple.opengl (11.1.2 - 11.1.2) <864B35BF-1E76-382B-8D5F-38C7282621E6> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL\r\n    0x7fff85a22000 -     0x7fff85a76fff  libc++.1.dylib (120) <1B9530FD-989B-3174-BB1C-BDC159501710> /usr/lib/libc++.1.dylib\r\n    0x7fff85a77000 -     0x7fff85ac3ff7  libcups.2.dylib (408.2) <E8AD18F9-61E4-3791-B840-504468C25556> /usr/lib/libcups.2.dylib\r\n    0x7fff85ac4000 -     0x7fff85d43ff7  com.apple.CoreData (111 - 526.3) <5A27E0D8-5E5A-335B-B3F6-2601C7B976FA> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData\r\n    0x7fff85d69000 -     0x7fff85da4fff  com.apple.QD (301 - 301) <C4D2AD03-B839-350A-AAF0-B4A08F8BED77> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD\r\n    0x7fff85dbf000 -     0x7fff85dc3fff  com.apple.TCC (1.0 - 1) <CCA42EE2-3400-3444-9486-BC454E60D944> /System/Library/PrivateFrameworks/TCC.framework/Versions/A/TCC\r\n    0x7fff85dc4000 -     0x7fff85dc6fff  com.apple.loginsupport (1.0 - 1) <DAAD7013-A19D-3858-BFF7-DE1DAF664401> /System/Library/PrivateFrameworks/login.framework/Versions/A/Frameworks/loginsupport.framework/Versions/A/loginsupport\r\n    0x7fff85dc7000 -     0x7fff85dc8ff3  libSystem.B.dylib (1213) <CCEC13A5-D0D9-31C5-B0B0-1C564B4A20A6> /usr/lib/libSystem.B.dylib\r\n    0x7fff85dfa000 -     0x7fff85e15ff7  libCRFSuite.dylib (34) <D64842BE-7BD4-3D0C-9842-1D202F7C2A51> /usr/lib/libCRFSuite.dylib\r\n    0x7fff85e16000 -     0x7fff85e8eff7  com.apple.SystemConfiguration (1.14 - 1.14) <06A8405D-53BA-30A9-BA8A-222099176091> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration\r\n    0x7fff85e8f000 -     0x7fff85e90fff  liblangid.dylib (117) <B54A4AA0-2E53-3671-90F5-AFF711C0EB9E> /usr/lib/liblangid.dylib\r\n    0x7fff85fee000 -     0x7fff85ff5ff7  libcompiler_rt.dylib (35) <BF8FC133-EE10-3DA6-9B90-92039E28678F> /usr/lib/system/libcompiler_rt.dylib\r\n    0x7fff85ff6000 -     0x7fff85ff7fff  libsystem_secinit.dylib (18) <581DAD0F-6B63-3A48-B63B-917AF799ABAA> /usr/lib/system/libsystem_secinit.dylib\r\n    0x7fff86024000 -     0x7fff86065fff  libGLU.dylib (11.1.2) <4C54F0D1-2ADC-38A0-92D1-F479E9B99355> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib\r\n    0x7fff87309000 -     0x7fff87326fff  com.apple.MultitouchSupport.framework (263.9.1 - 263.9.1) <6ABD3AE2-DF6A-3AB2-994B-9C0FB42CE2B7> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport\r\n    0x7fff87515000 -     0x7fff8753dfff  libxpc.dylib (559.20.9) <D35D0DB2-D7BD-3BE4-8378-062BFE545E1D> /usr/lib/system/libxpc.dylib\r\n    0x7fff87852000 -     0x7fff87862ff7  libbsm.0.dylib (34) <A3A2E56C-2B65-37C7-B43A-A1F926E1A0BB> /usr/lib/libbsm.0.dylib\r\n    0x7fff87d02000 -     0x7fff87d05ff7  libdyld.dylib (353.2.1) <9EACCA38-291D-38CC-811F-7E9D1451E2D3> /usr/lib/system/libdyld.dylib\r\n    0x7fff87d0f000 -     0x7fff87dfffef  libJP2.dylib (1237) <A24C99BF-2360-343F-BCA1-F044E78EA0DE> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib\r\n    0x7fff87f3e000 -     0x7fff88084fef  libsqlite3.dylib (168) <8B78BED1-7B9B-3943-80DC-0871015AEAC4> /usr/lib/libsqlite3.dylib\r\n    0x7fff88092000 -     0x7fff88103ffb  com.apple.ApplicationServices.ATS (360 - 375.2) <2338AF23-528F-359A-847F-8B04E49E2B84> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS\r\n    0x7fff88265000 -     0x7fff88265ff7  libkeymgr.dylib (28) <77845842-DE70-3CC5-BD01-C3D14227CED5> /usr/lib/system/libkeymgr.dylib\r\n    0x7fff88271000 -     0x7fff8827bff7  com.apple.NetAuth (5.2 - 5.2) <2BBD749A-8E18-35B8-8E48-A90347C1CCA7> /System/Library/PrivateFrameworks/NetAuth.framework/Versions/A/NetAuth\r\n    0x7fff882b4000 -     0x7fff88328ffb  com.apple.securityfoundation (6.0 - 55126) <42589E18-D38C-3E25-B638-6E29740C224C> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation\r\n    0x7fff88329000 -     0x7fff8836fff7  libauto.dylib (186) <A260789B-D4D8-316A-9490-254767B8A5F1> /usr/lib/libauto.dylib\r\n    0x7fff883b7000 -     0x7fff883d3ff7  libsystem_malloc.dylib (53.1.1) <19BCC257-5717-3502-A71F-95D65AFA861B> /usr/lib/system/libsystem_malloc.dylib\r\n    0x7fff8845f000 -     0x7fff88583ff7  com.apple.LaunchServices (644.56 - 644.56) <20AABB1C-9319-3E4D-A024-51B0DD5FCD3B> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices\r\n    0x7fff88768000 -     0x7fff88793fff  com.apple.DictionaryServices (1.2 - 229) <F03DFAC6-6285-3176-9C6D-7CC50F8CD52A> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices\r\n    0x7fff88794000 -     0x7fff8879cffb  libcopyfile.dylib (118.1.2) <0C68D3A6-ACDD-3EF3-991A-CC82C32AB836> /usr/lib/system/libcopyfile.dylib\r\n    0x7fff888b9000 -     0x7fff888e9fff  com.apple.GSS (4.0 - 2.0) <A37BAF76-C262-3292-B82D-F004CAC5F333> /System/Library/Frameworks/GSS.framework/Versions/A/GSS\r\n    0x7fff889e7000 -     0x7fff889f8fff  libsystem_coretls.dylib (35.20.2) <6084A531-2523-39F8-B030-811FA1A32FB5> /usr/lib/system/libsystem_coretls.dylib\r\n    0x7fff889f9000 -     0x7fff88bdeff7  libicucore.A.dylib (531.48) <3CD34752-B1F9-31D2-865D-B5B0F0BE3111> /usr/lib/libicucore.A.dylib\r\n    0x7fff88c3e000 -     0x7fff8947afe3  com.apple.CoreGraphics (1.600.0 - 779.11) <DC15AADD-387C-348E-84F0-1C8BAAB1B567> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics\r\n    0x7fff896e9000 -     0x7fff896ecfff  com.apple.xpc.ServiceManagement (1.0 - 1) <9E025823-660A-30C5-A568-223BD595B6F7> /System/Library/Frameworks/ServiceManagement.framework/Versions/A/ServiceManagement\r\n    0x7fff896fa000 -     0x7fff896fafff  com.apple.Accelerate.vecLib (3.10 - vecLib 3.10) <9D749502-A228-3BF1-B52F-A182DEEB2C4D> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib\r\n    0x7fff896fb000 -     0x7fff896fefff  com.apple.IOSurface (97.4 - 97.4) <AE11CFBC-4D46-30F3-BEEC-4C8131079391> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface\r\n    0x7fff89c66000 -     0x7fff89c66ff7  libunc.dylib (29) <5676F7EA-C1DF-329F-B006-D2C3022B7D70> /usr/lib/system/libunc.dylib\r\n    0x7fff89ce3000 -     0x7fff89cf2fff  com.apple.LangAnalysis (1.7.0 - 1.7.0) <D1E527E4-C561-352F-9457-E8C50232793C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis\r\n    0x7fff89cf3000 -     0x7fff89d20fff  com.apple.CoreVideo (1.8 - 145.1) <18DB07E0-B927-3260-A234-636F298D1917> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo\r\n    0x7fff8ace4000 -     0x7fff8ace9fff  libsystem_stats.dylib (163.20.16) <FBC3F80F-A0FB-3BD6-9A7E-800DE45F092E> /usr/lib/system/libsystem_stats.dylib\r\n    0x7fff8ae08000 -     0x7fff8b139fff  com.apple.Foundation (6.9 - 1153.20) <F0FF3A5D-C5B7-34A1-9319-DE1EF928E58E> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation\r\n    0x7fff8b329000 -     0x7fff8b340ff7  libLinearAlgebra.dylib (1128) <E78CCBAA-A999-3B65-8EC9-06DB15E67C37> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLinearAlgebra.dylib\r\n    0x7fff8b486000 -     0x7fff8b4d3ff7  com.apple.print.framework.PrintCore (10.3 - 451.1) <DE992474-0841-38A1-B4F6-46D653E454D5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore\r\n    0x7fff8b5a0000 -     0x7fff8b616fe7  libcorecrypto.dylib (233.1.2) <E1789801-3985-3949-B736-6B3378873301> /usr/lib/system/libcorecrypto.dylib\r\n    0x7fff8b617000 -     0x7fff8b730ffb  com.apple.CoreText (352.0 - 454.6) <D45790B0-E1A3-3C7D-8BA2-AB71D2CFA7FB> /System/Library/Frameworks/CoreText.framework/Versions/A/CoreText\r\n    0x7fff8b7bf000 -     0x7fff8b7c3fff  libcache.dylib (69) <45E9A2E7-99C4-36B2-BEE3-0C4E11614AD1> /usr/lib/system/libcache.dylib\r\n    0x7fff8b956000 -     0x7fff8b97afef  libJPEG.dylib (1237) <6DB10054-5C64-32FB-83FD-E102A8F73258> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib\r\n    0x7fff8b9ab000 -     0x7fff8b9b3ff3  com.apple.CoreServices.FSEvents (1210.20.1 - 1210.20.1) <84F79D3E-7B5E-3C93-8479-35794A3F125E> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/FSEvents\r\n    0x7fff8b9b4000 -     0x7fff8ba1bffb  com.apple.datadetectorscore (6.0 - 396.1.1) <9B0B3198-DDBE-36C0-8BA9-3EC89C725282> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore\r\n    0x7fff8ba98000 -     0x7fff8baa3fff  libcommonCrypto.dylib (60061) <D381EBC6-69D8-31D3-8084-5A80A32CB748> /usr/lib/system/libcommonCrypto.dylib\r\n    0x7fff8baa4000 -     0x7fff8baa6fff  libRadiance.dylib (1237) <9B048776-53BB-3947-8ECE-9DDA804C86B2> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib\r\n    0x7fff8baa8000 -     0x7fff8bad8fff  libsystem_m.dylib (3086.1) <1E12AB45-6D96-36D0-A226-F24D9FB0D9D6> /usr/lib/system/libsystem_m.dylib\r\n    0x7fff8bbb0000 -     0x7fff8bbb9fff  libsystem_pthread.dylib (105.10.1) <3103AA7F-3BAE-3673-9649-47FFD7E15C97> /usr/lib/system/libsystem_pthread.dylib\r\n    0x7fff8bc64000 -     0x7fff8bc64fff  libOpenScriptingUtil.dylib (162.1) <E0605012-0DDB-3150-8FD0-699376FA3CD0> /usr/lib/libOpenScriptingUtil.dylib\r\n    0x7fff8bc65000 -     0x7fff8bdccffb  com.apple.audio.toolbox.AudioToolbox (1.12 - 1.12) <5678FC94-456A-3F5F-BA9A-10EB6E462997> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox\r\n    0x7fff8beb6000 -     0x7fff8bec1fff  libGL.dylib (11.1.2) <BF99CC65-215A-3C7D-87D7-3F7EE6E9B3DD> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib\r\n    0x7fff8bfb0000 -     0x7fff8bfb9ff3  com.apple.CommonAuth (4.0 - 2.0) <BA9F5A09-D200-3D18-9F4A-20C789291A30> /System/Library/PrivateFrameworks/CommonAuth.framework/Versions/A/CommonAuth\r\n    0x7fff8bff2000 -     0x7fff8c00bff7  com.apple.CFOpenDirectory (10.10 - 187) <790ED527-EFD2-3EA6-8C97-A8C04E96EBA7> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory\r\n    0x7fff8c011000 -     0x7fff8c0affff  com.apple.Metadata (10.7.0 - 917.35) <8CBD1D32-4F4B-3F9A-AC65-76F2B5376FBF> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata\r\n    0x7fff8c1e9000 -     0x7fff8c203fff  com.apple.AppleVPAFramework (1.4.3 - 1.4.3) <AE62A92E-EDA7-37AD-8AF0-7912E9381A1F> /System/Library/PrivateFrameworks/AppleVPA.framework/Versions/A/AppleVPA\r\n    0x7fff8c204000 -     0x7fff8c206ff7  libsystem_coreservices.dylib (9) <41B7C578-5A53-31C8-A96F-C73E030B0938> /usr/lib/system/libsystem_coreservices.dylib\r\n    0x7fff8c2af000 -     0x7fff8c2baff7  libkxld.dylib (2782.20.48) <28EF8328-E3E2-336A-974B-FB1BF119D55A> /usr/lib/system/libkxld.dylib\r\n    0x7fff8c2bb000 -     0x7fff8c3adfff  libxml2.2.dylib (26) <B834E7C8-EC3E-3382-BC5A-DA38DC4D720C> /usr/lib/libxml2.2.dylib\r\n    0x7fff8c3ae000 -     0x7fff8c4a0ff7  libiconv.2.dylib (42) <2A06D02F-8B76-3864-8D96-64EF5B40BC6C> /usr/lib/libiconv.2.dylib\r\n    0x7fff8c9d8000 -     0x7fff8ca10fff  libsystem_network.dylib (412.20.3) <589A5F67-BE2A-3245-A181-0ECC9B53EB00> /usr/lib/system/libsystem_network.dylib\r\n    0x7fff8ca18000 -     0x7fff8ca19ff7  libsystem_blocks.dylib (65) <9615D10A-FCA7-3BE4-AA1A-1B195DACE1A1> /usr/lib/system/libsystem_blocks.dylib\r\n    0x7fff8ca40000 -     0x7fff8cd27ffb  com.apple.CoreServices.CarbonCore (1108.6 - 1108.6) <8953580E-7857-33B2-AA64-98296830D3A8> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore\r\n    0x7fff8d219000 -     0x7fff8d243ff7  libdispatch.dylib (442.1.4) <502CF32B-669B-3709-8862-08188225E4F0> /usr/lib/system/libdispatch.dylib\r\n    0x7fff8d264000 -     0x7fff8d303e27  com.apple.AppleJPEG (1.0 - 1) <6627DDD9-A8FE-3968-B23A-B6A29AA3919A> /System/Library/PrivateFrameworks/AppleJPEG.framework/Versions/A/AppleJPEG\r\n    0x7fff8d31d000 -     0x7fff8d4abfff  libBLAS.dylib (1128) <497912C1-A98E-3281-BED7-E9C751552F61> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib\r\n    0x7fff8d4ac000 -     0x7fff8d4fdfff  com.apple.audio.CoreAudio (4.3.0 - 4.3.0) <450293F7-DAE7-3DD0-8F7C-71FC2FD72627> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio\r\n    0x7fff8d888000 -     0x7fff8d894ff7  com.apple.OpenDirectory (10.10 - 187) <1E07769D-68DE-3BF2-8E9E-A1E98BF70D1B> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory\r\n    0x7fff8d895000 -     0x7fff8d89bff7  libsystem_networkextension.dylib (167.1.10) <29AB225B-D7FB-30ED-9600-65D44B9A9442> /usr/lib/system/libsystem_networkextension.dylib\r\n    0x7fff8d89c000 -     0x7fff8da9646f  libobjc.A.dylib (647) <759E155D-BC42-3D4E-869B-6F57D477177C> /usr/lib/libobjc.A.dylib\r\n    0x7fff8da97000 -     0x7fff8da99fff  libsystem_configuration.dylib (699.1.5) <20F3B077-179D-3CB0-A3C1-C8602D53B4DB> /usr/lib/system/libsystem_configuration.dylib\r\n    0x7fff8dd0c000 -     0x7fff8dd66ff7  com.apple.LanguageModeling (1.0 - 1) <ACA93FE0-A0E3-333E-AE3C-8EB7DE5F362F> /System/Library/PrivateFrameworks/LanguageModeling.framework/Versions/A/LanguageModeling\r\n    0x7fff8dd74000 -     0x7fff8de00ff7  libsystem_c.dylib (1044.10.1) <86FBED7A-F2C8-3591-AD6F-486DD57E6B6A> /usr/lib/system/libsystem_c.dylib\r\n    0x7fff8e76c000 -     0x7fff8e76dffb  libremovefile.dylib (35) <3485B5F4-6CE8-3C62-8DFD-8736ED6E8531> /usr/lib/system/libremovefile.dylib\r\n    0x7fff8e76e000 -     0x7fff8e772ff7  libGIF.dylib (1237) <8A40FED5-FA90-3E76-A359-CD974C43A962> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib\r\n    0x7fff8e773000 -     0x7fff8e79efff  libc++abi.dylib (125) <88A22A0F-87C6-3002-BFBA-AC0F2808B8B9> /usr/lib/libc++abi.dylib\r\n    0x7fff8e79f000 -     0x7fff8e7b0ff7  libz.1.dylib (55) <88C7C7DE-04B8-316F-8B74-ACD9F3DE1AA1> /usr/lib/libz.1.dylib\r\n    0x7fff8e7ba000 -     0x7fff8e7bbfff  libDiagnosticMessagesClient.dylib (100) <2EE8E436-5CDC-34C5-9959-5BA218D507FB> /usr/lib/libDiagnosticMessagesClient.dylib\r\n    0x7fff8f2f0000 -     0x7fff8f315fff  libPng.dylib (1237) <F5652650-87ED-3D53-9E59-A897DFA41DD0> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib\r\n    0x7fff8fac7000 -     0x7fff8facffff  libsystem_dnssd.dylib (561.1.1) <62B70ECA-E40D-3C63-896E-7F00EC386DDB> /usr/lib/system/libsystem_dnssd.dylib\r\n    0x7fff8fb62000 -     0x7fff8fba8ff7  libFontRegistry.dylib (134.1) <CE41D8C2-BEED-345C-BC4F-3775CC06C672> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib\r\n    0x7fff8feaf000 -     0x7fff8feb8ff7  libsystem_notify.dylib (133.1.1) <61147800-F320-3DAA-850C-BADF33855F29> /usr/lib/system/libsystem_notify.dylib\r\n    0x7fff8fefb000 -     0x7fff8ff69ffb  com.apple.Heimdal (4.0 - 2.0) <7697A837-98B8-3BDB-A7D2-8ED4C9ABC510> /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal\r\n    0x7fff8ff6a000 -     0x7fff8ff6fff7  libunwind.dylib (35.3) <BE7E51A0-B6EA-3A54-9CCA-9D88F683A6D6> /usr/lib/system/libunwind.dylib\r\n    0x7fff8ff70000 -     0x7fff900aafff  com.apple.ImageIO.framework (3.3.0 - 1237) <3C06213D-847A-3C7B-843E-6EC37113965D> /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO\r\n    0x7fff900ab000 -     0x7fff900abfff  com.apple.Accelerate (1.10 - Accelerate 1.10) <2C8AF258-4F11-3BEC-A826-22D7199B3975> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate\r\n    0x7fff900ac000 -     0x7fff900d4fff  libsystem_info.dylib (459.20.1) <AEB3FE62-4763-3050-8352-D6F9AF961AE6> /usr/lib/system/libsystem_info.dylib\r\n    0x7fff901d2000 -     0x7fff901d6fff  libpam.2.dylib (20) <E805398D-9A92-31F8-8005-8DC188BD8B6E> /usr/lib/libpam.2.dylib\r\n    0x7fff901dc000 -     0x7fff905e9ff7  libLAPACK.dylib (1128) <F9201AE7-B031-36DB-BCF8-971E994EF7C1> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib\r\n    0x7fff9076e000 -     0x7fff9077ffff  libcmph.dylib (1) <46EC3997-DB5E-38AE-BBBB-A035A54AD3C0> /usr/lib/libcmph.dylib\r\n    0x7fff90827000 -     0x7fff9082cff7  libmacho.dylib (862) <126CA2ED-DE91-308F-8881-B9DAEC3C63B6> /usr/lib/system/libmacho.dylib\r\n    0x7fff9082d000 -     0x7fff9084affb  libresolv.9.dylib (57) <26B38E61-298A-3C3A-82C1-3B5E98AD5E29> /usr/lib/libresolv.9.dylib\r\n    0x7fff90855000 -     0x7fff90895ff7  libGLImage.dylib (11.1.2) <260A4BF3-DC45-369C-A0CD-B667F9D17179> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib\r\n    0x7fff90941000 -     0x7fff90c74ff7  libmecabra.dylib (666.7) <0ED8AE5E-7A5B-34A6-A2EE-2B852E60E1E2> /usr/lib/libmecabra.dylib\r\n    0x7fff90c7c000 -     0x7fff90cacff7  libncurses.5.4.dylib (44) <F09809A4-53B9-3E91-A8FA-D3F584C03AA3> /usr/lib/libncurses.5.4.dylib\r\n    0x7fff910de000 -     0x7fff910f4ff7  libsystem_asl.dylib (267) <F153AC5B-0542-356E-88C8-20A62CA704E2> /usr/lib/system/libsystem_asl.dylib\r\n    0x7fff91119000 -     0x7fff91174fe7  libTIFF.dylib (1237) <6C8BBCA3-C233-3941-ACF9-F06C5E6EE2E6> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib\r\n    0x7fff91497000 -     0x7fff917b2fcf  com.apple.vImage (8.0 - 8.0) <1183FE6A-FDB6-3B3B-928D-50C7909F2308> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage\r\n    0x7fff9191a000 -     0x7fff91927fff  libxar.1.dylib (255) <7CD69BB5-97BA-3858-8A8B-2F33F129E6E7> /usr/lib/libxar.1.dylib\r\n    0x7fff91928000 -     0x7fff91928fff  com.apple.CoreServices (62 - 62) <C69DA8A7-B536-34BF-A93F-1C170E2C6D58> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices\r\n    0x7fff91c2f000 -     0x7fff91c31fff  libCVMSPluginSupport.dylib (11.1.2) <6EFEC4A6-2EAC-3C27-820E-C28BE71B9FCB> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCVMSPluginSupport.dylib\r\n    0x7fff91d1b000 -     0x7fff91d44ffb  libxslt.1.dylib (13) <AED1143F-B848-3E73-81ED-71356F25F084> /usr/lib/libxslt.1.dylib\r\n    0x7fff91ee5000 -     0x7fff91f7aff7  com.apple.ColorSync (4.9.0 - 4.9.0) <9150C2B7-2E6E-3509-96EA-7B3F959F049E> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync\r\n    0x7fff91f7b000 -     0x7fff91feafff  com.apple.SearchKit (1.4.0 - 1.4.0) <80883BD1-C9BA-3794-A20E-476F94DD89A9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit\r\n    0x7fff91feb000 -     0x7fff921f8ff3  com.apple.CFNetwork (720.3.13 - 720.3.13) <69E15385-5784-3912-88F6-03B16F1C1A5C> /System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork\r\n    0x7fff921f9000 -     0x7fff92200fff  com.apple.NetFS (6.0 - 4.0) <1581D25F-CC07-39B0-90E8-5D4F3CF84EBA> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS\r\n    0x7fff922e9000 -     0x7fff9235bfff  com.apple.framework.IOKit (2.0.2 - 1050.20.2) <09C0518C-90DF-3FC3-96D6-34D35F72C8EF> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit\r\n    0x7fff928c8000 -     0x7fff92912ff7  com.apple.HIServices (1.22 - 522.1) <E8BD41E4-7747-3CAF-807A-5CA9AD16B525> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices\r\n    0x7fff929af000 -     0x7fff92ac1ff7  libvDSP.dylib (516) <151B3CCB-77D3-3715-A3D0-7C74CD5C7FFC> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib\r\n    0x7fff92ac2000 -     0x7fff92b71fe7  libvMisc.dylib (516) <6739E390-46E7-3BFA-9B69-B278562326E6> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib\r\n    0x7fff92bc2000 -     0x7fff92bc8fff  libsystem_trace.dylib (72.20.1) <840F5301-B55A-3078-90B9-FEFFD6CD741A> /usr/lib/system/libsystem_trace.dylib\r\n    0x7fff92bdc000 -     0x7fff92bdcff7  liblaunch.dylib (559.20.9) <FA89A113-696E-3271-8FE1-A0D7324E8481> /usr/lib/system/liblaunch.dylib\r\n    0x7fff92bdd000 -     0x7fff92c3cfff  com.apple.AE (681.2 - 681.2) <181B3B06-2DC6-3E4D-B44A-2551C5E9CF6F> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE\r\n    0x7fff92c9c000 -     0x7fff92ca0fff  libCoreVMClient.dylib (79.1) <201EF6DF-5074-3CB7-A361-398CF957A264> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib\r\n    0x7fff92ca4000 -     0x7fff92ccfff3  libarchive.2.dylib (30) <8CBB4416-EBE9-3574-8ADC-44655D245F39> /usr/lib/libarchive.2.dylib\r\n    0x7fff92e11000 -     0x7fff92e2bff7  liblzma.5.dylib (7) <1D03E875-A7C0-3028-814C-3C27F7B7C079> /usr/lib/liblzma.5.dylib\r\n    0x7fff92e2c000 -     0x7fff92e2efff  libsystem_sandbox.dylib (358.20.5) <4CF77128-6BE0-3958-B646-707FA9CE61B2> /usr/lib/system/libsystem_sandbox.dylib\r\n    0x7fff92e32000 -     0x7fff92f26fff  libFontParser.dylib (134.2) <9F57B025-AB9C-31DD-9D54-2D7AB1298885> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib\r\n    0x7fff931f2000 -     0x7fff931fafff  libsystem_platform.dylib (63) <64E34079-D712-3D66-9CE2-418624A5C040> /usr/lib/system/libsystem_platform.dylib\r\n    0x7fff9324b000 -     0x7fff9324dfff  libquarantine.dylib (76.20.1) <7AF90041-2768-378A-925A-D83161863642> /usr/lib/system/libquarantine.dylib\r\n    0x7fff9324e000 -     0x7fff93253fff  com.apple.DiskArbitration (2.6 - 2.6) <0DFF4D9B-2AC3-3B82-B5C5-30F4EFBD2DB9> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration\r\n    0x7fff9378a000 -     0x7fff9378afff  com.apple.ApplicationServices (48 - 48) <5BF7910B-C328-3BF8-BA4F-CE52B574CE01> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices\r\n    0x7fff9378b000 -     0x7fff939f5ff7  com.apple.security (7.0 - 57031.20.26) <6568520A-587D-3167-BB79-60CE6FEADC64> /System/Library/Frameworks/Security.framework/Versions/A/Security\r\n    0x7fff93ab4000 -     0x7fff93aceff7  libextension.dylib (55.2) <3BB019CA-199A-36AC-AA22-14B562138545> /usr/lib/libextension.dylib\r\n\r\nExternal Modification Summary:\r\n  Calls made by other processes targeting this process:\r\n    task_for_pid: 0\r\n    thread_create: 0\r\n    thread_set_state: 0\r\n  Calls made by this process:\r\n    task_for_pid: 0\r\n    thread_create: 0\r\n    thread_set_state: 0\r\n  Calls made by all processes on this machine:\r\n    task_for_pid: 241533\r\n    thread_create: 0\r\n    thread_set_state: 0\r\n\r\nVM Region Summary:\r\nReadOnly portion of Libraries: Total=148.1M resident=194.2M(131%) swapped_out_or_unallocated=16777216.0T(11876268244992%)\r\nWritable regions: Total=67.4M written=4200K(6%) resident=5516K(8%) swapped_out=0K(0%) unallocated=62.0M(92%)\r\n \r\nREGION TYPE                      VIRTUAL\r\n===========                      =======\r\nDispatch continuations             8192K\r\nIOKit                                48K\r\nKernel Alloc Once                     8K\r\nMALLOC                             37.9M\r\nMALLOC (admin)                       32K\r\nSTACK GUARD                        56.1M\r\nStack                              20.7M\r\nVM_ALLOCATE                          48K\r\n__DATA                             6548K\r\n__LINKEDIT                         74.0M\r\n__TEXT                             74.2M\r\n__UNICODE                           552K\r\nmapped file                        25.3M\r\nshared memory                         4K\r\n===========                      =======\r\nTOTAL                             303.2M\r\n\r\n ```"},"comment":{"url":"https://api.github.com/repos/facebook/osquery/issues/comments/114686325","html_url":"https://github.com/facebook/osquery/issues/1237#issuecomment-114686325","issue_url":"https://api.github.com/repos/facebook/osquery/issues/1237","id":114686325,"user":{"login":"marpaia","id":927168,"avatar_url":"https://avatars.githubusercontent.com/u/927168?v=3","gravatar_id":"","url":"https://api.github.com/users/marpaia","html_url":"https://github.com/marpaia","followers_url":"https://api.github.com/users/marpaia/followers","following_url":"https://api.github.com/users/marpaia/following{/other_user}","gists_url":"https://api.github.com/users/marpaia/gists{/gist_id}","starred_url":"https://api.github.com/users/marpaia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marpaia/subscriptions","organizations_url":"https://api.github.com/users/marpaia/orgs","repos_url":"https://api.github.com/users/marpaia/repos","events_url":"https://api.github.com/users/marpaia/events{/privacy}","received_events_url":"https://api.github.com/users/marpaia/received_events","type":"User","site_admin":false},"created_at":"2015-06-24T01:03:06Z","updated_at":"2015-06-24T01:03:06Z","body":"@mwielgoszewski I can't reproduce this, but it looks like the problem is that, in the `osquery::tables::CreatePropertyFromCertificate function`, we make a call to `SecCertificateCopyValues` and `CFDictionaryGetValue` and immediately pass it to CFDictionaryContainsKey without first checking if the value is a NULL/nullptr.\r\n\r\nI put up #1239 which checks that condition and exits gracefully if that error condition is met. @theopolis, what say you?\r\n\r\nI think, unless we can get a copy of all of your certificates (lol), the only way to test this would be to build osquery from master on your laptop, reproduce the error, patch to #1239, see if the error is fixed. is that something you'd be up for, marcin?"}}