Project

General

Profile

Actions

Bug #4580

closed
JL VJ

Task #5682: tracking: smb performance issues

smb: large streams can cause large memory moves (memmove)

Bug #4580: smb: large streams can cause large memory moves (memmove)

Added by Jeff Lucovsky over 4 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Large SMB streams can cause Suricata to move large chunks of memory (multi-tens of megabytes and higher) to make room for newly inbound packets. This seems to happen most often when there are gaps in the stream for which packets arrive later.


Related issues 2 (0 open2 closed)

Related to Suricata - Security #5712: tcp: crafted packets lead to resource starvationClosedVictor JulienActions
Related to Suricata - Security #5700: SCRealloc of large chunk crashes SuricataClosedVictor JulienActions

VJ Updated by Victor Julien over 3 years ago Actions #1

  • Status changed from New to In Progress
  • Assignee set to Victor Julien
  • Target version set to TBD

I have some work in progress to try to address it. Need to refresh it.

VJ Updated by Victor Julien over 3 years ago Actions #2

  • Subject changed from Large SMB streams can cause large memory moves to smb: large streams can cause large memory moves (memmove)

VJ Updated by Victor Julien over 3 years ago Actions #3

  • Target version changed from TBD to 8.0.0-beta1
  • Parent task set to #5682

VJ Updated by Victor Julien over 3 years ago Actions #4

  • Priority changed from Normal to High

VJ Updated by Victor Julien over 3 years ago Actions #5

  • Related to Security #5712: tcp: crafted packets lead to resource starvation added

VJ Updated by Victor Julien over 3 years ago Actions #6

  • Target version changed from 8.0.0-beta1 to 7.0.0-rc1

VJ Updated by Victor Julien over 3 years ago Actions #7

  • Related to Security #5700: SCRealloc of large chunk crashes Suricata added

VJ Updated by Victor Julien about 3 years ago Actions #8

  • Status changed from In Progress to Closed
  • Priority changed from High to Normal
Actions

Also available in: PDF Atom