Bug #5355: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (6.0.x backport) - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5355

closed

Bug #5353: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails

detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (6.0.x backport)

Added by Juliana Fajardini Reichow over 2 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Juliana Fajardini Reichow

Target version:

6.0.6

Affected Versions:

6.0.6, 7.0.0-beta1

Effort:

Difficulty:

Label:

Description

This happens because `alerts.discarded` is being incremented indirectly via the DetCtx's Packet, instead of using the Packet that is passed to the function.

(Backport ticket)

Subtasks 1 (0 open — 1 closed)

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Copied from Bug #5353: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails added

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Status changed from New to In Progress

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Status changed from In Progress to In Review

PR for review: https://github.com/OISF/suricata/pull/7397

Actions

Copy link

Updated by Jeff Lucovsky over 2 years ago

Subject changed from detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails to detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (6.0.x backport)

Actions

Copy link