Bug #5457
closed
Counters are not initialized in all places.
Added by tug tugtug over 1 year ago.
Updated over 1 year ago.
Label:
Needs backport to 6.0
Description
counter_alerts_overflow and counter_alerts_suppressed are only initialized in DetectEngineThreadCtxInit in detect-engine.c, but not in DetectEngineThreadCtxInitForReload.
i.e. once suricata rules are reload, these 2 counters would become invalid and writes to incorrect structure in StatsAddUI64. In fact, if one turns on debugging, the BUG_ON should trigger in StatsAddUI64.
- Assignee changed from OISF Dev to Juliana Fajardini Reichow
- Target version changed from TBD to 6.0.7
- Target version changed from 6.0.7 to 7.0.0-beta1
- Affected Versions 5.0.9 added
- Label Needs backport to 5.0, Needs backport to 6.0 added
- Copied to Bug #5459: Counters are not initialized in all places. (6.0.x backport) added
- Affected Versions 5.0.10 added
- Affected Versions deleted (
5.0.9)
- Label deleted (
Needs backport to 5.0)
- Status changed from New to In Review
- Status changed from In Review to Closed
Also available in: Atom
PDF