Bug #3568: rules: bad rule leads to memory exhaustion - Suricata - Open Information Security Foundation

Actions

Bug #3568

closed

Status:

Closed

Priority:

Normal

Assignee:

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

./src/fuzz_siginit ~/Downloads/clusterfuzz-testcase-minimized-fuzz_siginit-5659361696546816

Looks like it is related to

  11,67%  fuzz_siginit                     [.] IPOnlyCIDRItemNew
   4,23%  fuzz_siginit                     [.] IPOnlyCIDRItemParseSingle

Which suggests some kind of endless loop in the cidr parsing code.

Probably needs backporting too.

Files

Download all files

clusterfuzz-testcase-minimized-fuzz_siginit-5659361696546816 (195 Bytes) clusterfuzz-testcase-minimized-fuzz_siginit-5659361696546816		Victor Julien, 03/29/2020 01:23 PM
oom-78bdf2e728b5d507654e9a694dcfaa0dbcc0f24d (1.48 KB) oom-78bdf2e728b5d507654e9a694dcfaa0dbcc0f24d		Victor Julien, 04/06/2020 07:47 PM

Related issues 1 (0 open — 1 closed)

Actions

Also available in: Atom PDF