Project

General

Profile

Actions

Security #6187

open

detect: handle allocation failures during rule reload

Added by Philippe Antoine over 2 years ago. Updated 8 days ago.

Status:
In Progress
Priority:
Normal
Target version:
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
MODERATE
Disclosure Date:

Description

Currently, we `BUG_ON` allocation failures

It looks plausible to run out of memory when trying to reload rules...

Found by nallocfuzz


Related issues 3 (2 open1 closed)

Blocked by Suricata - Bug #8146: utils-spm-hs: missing deallocators on hs_compile failureIn ReviewSergey ZhidkihActions
Copied from Suricata - Security #5851: rust: handle allocation failuresNewOISF DevActions
Copied to Suricata - Optimization #6188: ConfYamlLoadString: handle allocation failuresClosedPhilippe AntoineActions
Actions #1

Updated by Philippe Antoine over 2 years ago

Actions #2

Updated by Philippe Antoine over 2 years ago

Actions #3

Updated by Philippe Antoine about 2 years ago

  • Priority changed from Normal to Low
Actions #4

Updated by Victor Julien over 1 year ago

  • Status changed from New to Assigned
  • Priority changed from Low to Normal
Actions #5

Updated by Philippe Antoine over 1 year ago

I think this one can be postponed after 8

Actions #6

Updated by Victor Julien 10 months ago

  • Target version changed from 8.0.0-beta1 to 9.0.0-beta1

Additionally to handling the C asserts, we have the problem of Rust panic catching.

Actions #7

Updated by Victor Julien 3 months ago

  • Subject changed from DetectEngineReload: handle allocation failures to detect: handle allocation failures during rule reload
Actions #8

Updated by Philippe Antoine 8 days ago

  • Status changed from Assigned to In Progress
Actions #9

Updated by Philippe Antoine 6 days ago

  • Blocked by Bug #8146: utils-spm-hs: missing deallocators on hs_compile failure added
Actions

Also available in: Atom PDF