Project

General

Profile

Actions
Copy link

Bug #5781

closed
VJ VJ

Task #5682: tracking: smb performance issues

smb: unbounded file chunk queuing after gap

Bug #5781: smb: unbounded file chunk queuing after gap

Added by Victor Julien over 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
7.0.0-rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Due to a logic error / missing logic in file tracker truncing, the post-GAP truncing didn't actually clear the stored out of order chunks or prevent new chunks for being stored. This could quickly exhaust every available memory.

The problem is mitigated by the max-read-queue-size setting, but this setting is not enabled by default.

Subtasks 1 (0 open — 1 closed)

Bug #5791: smb: unbounded file chunk queuing after gap (6.0.x backport)ClosedVictor JulienActions

Related issues 4 (1 open — 3 closed)

Related to Suricata - Optimization #5782: smb: set defaults for file chunk limitsClosedVictor JulienActions
Related to Suricata - Security #5700: SCRealloc of large chunk crashes SuricataClosedVictor JulienActions
Related to Suricata - Security #5703: smb: crash inside of streaming buffer Grow()ClosedVictor JulienActions
Related to Suricata - Bug #5363: Memory leak in rust SMB file trackerFeedbackOISF DevActions

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #1

  • Parent task set to #5682

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #2

SB Updated by Shivani Bhardwaj about 3 years ago Actions
Copy link
 #3

  • Subtask #5791 added

SB Updated by Shivani Bhardwaj about 3 years ago Actions
Copy link
 #4

  • Label deleted (Needs backport to 6.0)

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #6

  • Status changed from Resolved to Closed

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #7

  • Related to Security #5700: SCRealloc of large chunk crashes Suricata added

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #8

  • Related to Security #5703: smb: crash inside of streaming buffer Grow() added

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #9

  • Private changed from Yes to No

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #10

  • Related to Bug #5363: Memory leak in rust SMB file tracker added
Actions
Copy link

Also available in: PDF Atom