Bug #5459: Counters are not initialized in all places. (6.0.x backport) - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5459

closed

Bug #5457: Counters are not initialized in all places.

Counters are not initialized in all places. (6.0.x backport)

Added by Juliana Fajardini Reichow over 2 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Juliana Fajardini Reichow

Target version:

6.0.7

Affected Versions:

6.0.6

Effort:

Difficulty:

Label:

Description

counter_alerts_overflow and counter_alerts_suppressed are only initialized in DetectEngineThreadCtxInit in detect-engine.c, but not in DetectEngineThreadCtxInitForReload.

i.e. once suricata rules are reload, these 2 counters would become invalid and writes to incorrect structure in StatsAddUI64. In fact, if one turns on debugging, the BUG_ON should trigger in StatsAddUI64.

Related issues 1 (0 open — 1 closed)