Bug #6292: Flow manager stuck forever on race condition for return stack - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #6292

closed

Flow manager stuck forever on race condition for return stack

Added by Cole Dishington about 1 year ago. Updated about 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

7.0.3

Affected Versions:

7.0.0

Effort:

Difficulty:

Label:

Description

The return stack queue is checked before obtaining the lock in src/tmqh-packetpool.c:118. This leaves a small window where the FlowManager thread is waiting for the queue lock and another thread is populating the queue. The FlowManager thread would miss the signal as it had not started waiting for it. The FlowManager thread would be stuck forever.

The overall result of this is that there are no available packet buffers to be used for forcing closure of timed out flows, we run out of flows and traffic is blocked.