Project

General

Profile

Actions
Copy link

Bug #4074

closed
PA PA

Timeout while loading many rules with keyword ssl_version

Bug #4074: Timeout while loading many rules with keyword ssl_version

Added by Philippe Antoine over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
6.0.1
Affected Versions:
6.0.0
Effort:
Difficulty:
Label:
Needs backport

Description

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #4194: Timeout while loading many rules with keyword ssl_versionRejectedActions
Copied to Suricata - Bug #4195: Timeout while loading many rules with keyword ssl_versionRejectedActions

PA Updated by Philippe Antoine over 5 years ago Actions
Copy link
 #1

I do not know what to do :
- Rustlify the PARSE_REGEX from detect-ssl-version.c (but I am not sure I understand it)
- Limit the number of rules fuzz_sigpcap can load

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #2

  • Target version changed from 6.0.1 to 7.0.0-beta1
  • Label Needs backport to 6.0 added

So it's during the loading of rules that it fails? I think getting rid of the pcre, or perhaps using a more efficient regex is the most likely fix.

PA Updated by Philippe Antoine over 5 years ago Actions
Copy link
 #3

Yes during the loading of rules.

So, getting rid of the pcre seems to be the way

PA Updated by Philippe Antoine over 5 years ago Actions
Copy link
 #4

  • Status changed from New to In Review

Gitlab MR

PA Updated by Philippe Antoine over 5 years ago Actions
Copy link
 #5

  • Assignee set to Philippe Antoine
  • Target version changed from 7.0.0-beta1 to 6.0.1
  • Label Needs backport added
  • Label deleted (Needs backport to 6.0)

Gitlab

SB Updated by Shivani Bhardwaj over 5 years ago Actions
Copy link
 #6

  • Copied to Bug #4194: Timeout while loading many rules with keyword ssl_version added

SB Updated by Shivani Bhardwaj over 5 years ago Actions
Copy link
 #7

  • Copied to Bug #4195: Timeout while loading many rules with keyword ssl_version added

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #8

  • Status changed from In Review to Closed

JL Updated by Jeff Lucovsky over 5 years ago Actions
Copy link
 #9

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom