Project

General

Profile

Actions
Copy link

Bug #5354

closed
JF JF

Bug #5353: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails

detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)

Bug #5354: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)

Added by Juliana Fajardini Reichow almost 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
5.0.10
Affected Versions:
6.0.6, 7.0.0-beta1
Effort:
Difficulty:
Label:

Description

This happens because `alerts.discarded` is being incremented indirectly via the DetCtx's Packet, instead of using the Packet that is passed to the function.

(Backport)

Related issues 1 (0 open — 1 closed)

Copied to Suricata - Bug #5356: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand failsRejectedJuliana Fajardini ReichowActions

JF Updated by Juliana Fajardini Reichow almost 4 years ago Actions
Copy link
 #1

  • Affected Versions 6.0.6, 7.0.0-beta1 added
  • Affected Versions deleted (5.0.8)

JF Updated by Juliana Fajardini Reichow almost 4 years ago Actions
Copy link
 #2

  • Parent task set to #5353

JF Updated by Juliana Fajardini Reichow almost 4 years ago Actions
Copy link
 #3

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Juliana Fajardini Reichow

JF Updated by Juliana Fajardini Reichow almost 4 years ago Actions
Copy link
 #4

  • Copied to Bug #5356: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails added

JF Updated by Juliana Fajardini Reichow almost 4 years ago Actions
Copy link
 #5

  • Subject changed from detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails to detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)

JF Updated by Juliana Fajardini Reichow almost 4 years ago Actions
Copy link
 #6

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom