Actions
Bug #5459
closedBug #5457: Counters are not initialized in all places.
Counters are not initialized in all places. (6.0.x backport)
Affected Versions:
Effort:
Difficulty:
Label:
Description
counter_alerts_overflow and counter_alerts_suppressed are only initialized in DetectEngineThreadCtxInit in detect-engine.c, but not in DetectEngineThreadCtxInitForReload.
i.e. once suricata rules are reload, these 2 counters would become invalid and writes to incorrect structure in StatsAddUI64. In fact, if one turns on debugging, the BUG_ON should trigger in StatsAddUI64.
Actions