Project

General

Profile

Actions

Bug #4074

closed

Timeout while loading many rules with keyword ssl_version

Added by Philippe Antoine about 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport


Related issues 2 (0 open2 closed)

Copied to Suricata - Bug #4194: Timeout while loading many rules with keyword ssl_versionRejectedActions
Copied to Suricata - Bug #4195: Timeout while loading many rules with keyword ssl_versionRejectedActions
Actions #1

Updated by Philippe Antoine about 4 years ago

I do not know what to do :
- Rustlify the PARSE_REGEX from detect-ssl-version.c (but I am not sure I understand it)
- Limit the number of rules fuzz_sigpcap can load

Actions #2

Updated by Victor Julien about 4 years ago

  • Target version changed from 6.0.1 to 7.0.0-beta1
  • Label Needs backport to 6.0 added

So it's during the loading of rules that it fails? I think getting rid of the pcre, or perhaps using a more efficient regex is the most likely fix.

Actions #3

Updated by Philippe Antoine about 4 years ago

Yes during the loading of rules.

So, getting rid of the pcre seems to be the way

Actions #4

Updated by Philippe Antoine about 4 years ago

  • Status changed from New to In Review

Gitlab MR

Actions #5

Updated by Philippe Antoine about 4 years ago

  • Assignee set to Philippe Antoine
  • Target version changed from 7.0.0-beta1 to 6.0.1
  • Label Needs backport added
  • Label deleted (Needs backport to 6.0)

Gitlab

Actions #6

Updated by Shivani Bhardwaj about 4 years ago

  • Copied to Bug #4194: Timeout while loading many rules with keyword ssl_version added
Actions #7

Updated by Shivani Bhardwaj about 4 years ago

  • Copied to Bug #4195: Timeout while loading many rules with keyword ssl_version added
Actions #8

Updated by Victor Julien about 4 years ago

  • Status changed from In Review to Closed
Actions #9

Updated by Jeff Lucovsky about 4 years ago

  • Private changed from Yes to No
Actions

Also available in: Atom PDF