Actions
Bug #5781
closedTask #5682: tracking: smb performance issues
smb: unbounded file chunk queuing after gap
Affected Versions:
Effort:
Difficulty:
Label:
Description
Due to a logic error / missing logic in file tracker truncing, the post-GAP truncing didn't actually clear the stored out of order chunks or prevent new chunks for being stored. This could quickly exhaust every available memory.
The problem is mitigated by the max-read-queue-size setting, but this setting is not enabled by default.
Updated by Victor Julien almost 2 years ago
- Related to Optimization #5782: smb: set defaults for file chunk limits added
Updated by Shivani Bhardwaj almost 2 years ago
- Label deleted (
Needs backport to 6.0)
Updated by Victor Julien almost 2 years ago
- Status changed from In Progress to Resolved
Updated by Victor Julien almost 2 years ago
- Status changed from Resolved to Closed
Updated by Victor Julien almost 2 years ago
- Related to Security #5700: SCRealloc of large chunk crashes Suricata added
Updated by Victor Julien almost 2 years ago
- Related to Security #5703: smb: crash inside of streaming buffer Grow() added
Updated by Victor Julien almost 2 years ago
- Related to Bug #5363: Memory leak in rust SMB file tracker added
Actions