Project

General

Profile

Actions
Copy link

Bug #5353

closed

detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails

Added by Juliana Fajardini Reichow almost 2 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
7.0.0-beta1
Affected Versions:
6.0.6, 7.0.0-beta1
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

This happens because `alerts.discarded` is being incremented indirectly via the DetCtx's Packet, instead of using the Packet that is passed to the function.

Subtasks 3 (0 open — 3 closed)

Bug #5354: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)ClosedJuliana Fajardini ReichowActions
Bug #5355: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (6.0.x backport)ClosedJuliana Fajardini ReichowActions
Bug #5356: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand failsRejectedJuliana Fajardini ReichowActions

Related issues 1 (0 open — 1 closed)

Copied to Suricata - Bug #5355: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (6.0.x backport)ClosedJuliana Fajardini ReichowActions
Actions
Copy link

Also available in: Atom PDF