Project

General

Profile

Actions

Bug #2296

open
DB CT

Unix Manager Should Not Use Conf Functions to Pass Information to source-pcap-file

Bug #2296: Unix Manager Should Not Use Conf Functions to Pass Information to source-pcap-file

Added by Danny Browning over 8 years ago. Updated 9 months ago.

Status:
Feedback
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

See discussion on https://github.com/OISF/suricata/pull/2992

https://github.com/OISF/suricata/blob/master/src/runmode-unix-socket.c#L316

Using conf functionality at runtime is unsafe. A mutex protected tailq should be used to expose this information to source-pcap-file.

AH Updated by Andreas Herz over 8 years ago Actions #1

  • Assignee set to Danny Browning
  • Target version set to 70

AH Updated by Andreas Herz almost 7 years ago Actions #2

VJ Updated by Victor Julien over 6 years ago Actions #3

  • Status changed from New to Feedback

DB Updated by Danny Browning over 6 years ago Actions #4

This ticket came out of that PR.

Link to discussion: https://github.com/OISF/suricata/pull/2992#discussion_r152295401

VJ Updated by Victor Julien over 5 years ago Actions #5

  • Target version changed from 70 to TBD

VJ Updated by Victor Julien over 1 year ago Actions #6

  • Assignee changed from Danny Browning to Community Ticket

PA Updated by Philippe Antoine 9 months ago Actions #7

Wonder what is the way to reproduce a buggy behavior...

PA Updated by Philippe Antoine 9 months ago Actions #8

  • Affected Versions 8.0.0 added

We should have Conf functions have a debug validation that this is not runtime...

Actions

Also available in: PDF Atom