Project

General

Profile

Actions

Optimization #5230

closed

rules: too much time spent in DetectUnregisterThreadCtxFuncs due to pcre2

Added by Victor Julien 6 months ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Thread specific data for keywords is stored in a list, which worked fine until recently. However now that pcre2 also uses it, the list can get very large.

Perf flagged it as a major performance bottleneck during ruleset shutdown (incl reload).

Not an issue in 5 and 6.

Actions

Also available in: Atom PDF