Project

General

Profile

Actions

Bug #5781

closed

Task #5682: tracking: smb performance issues

smb: unbounded file chunk queuing after gap

Added by Victor Julien about 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Due to a logic error / missing logic in file tracker truncing, the post-GAP truncing didn't actually clear the stored out of order chunks or prevent new chunks for being stored. This could quickly exhaust every available memory.

The problem is mitigated by the max-read-queue-size setting, but this setting is not enabled by default.


Subtasks 1 (0 open1 closed)

Bug #5791: smb: unbounded file chunk queuing after gap (6.0.x backport)ClosedVictor JulienActions

Related issues 4 (1 open3 closed)

Related to Suricata - Optimization #5782: smb: set defaults for file chunk limitsClosedVictor JulienActions
Related to Suricata - Security #5700: SCRealloc of large chunk crashes SuricataClosedVictor JulienActions
Related to Suricata - Security #5703: smb: crash inside of streaming buffer Grow()ClosedVictor JulienActions
Related to Suricata - Bug #5363: Memory leak in rust SMB file trackerFeedbackOISF DevActions
Actions #1

Updated by Victor Julien about 1 year ago

  • Parent task set to #5682
Actions #2

Updated by Victor Julien about 1 year ago

Actions #3

Updated by Shivani Bhardwaj about 1 year ago

  • Subtask #5791 added
Actions #4

Updated by Shivani Bhardwaj about 1 year ago

  • Label deleted (Needs backport to 6.0)
Actions #6

Updated by Victor Julien about 1 year ago

  • Status changed from Resolved to Closed
Actions #7

Updated by Victor Julien about 1 year ago

  • Related to Security #5700: SCRealloc of large chunk crashes Suricata added
Actions #8

Updated by Victor Julien about 1 year ago

  • Related to Security #5703: smb: crash inside of streaming buffer Grow() added
Actions #9

Updated by Victor Julien about 1 year ago

  • Private changed from Yes to No
Actions #10

Updated by Victor Julien about 1 year ago

  • Related to Bug #5363: Memory leak in rust SMB file tracker added
Actions

Also available in: Atom PDF