Project

General

Profile

Actions

Bug #8146

open

utils-spm-hs: missing deallocators on hs_compile failure

Added by Sergey Zhidkih 27 days ago. Updated 13 days ago.

Status:
In Review
Priority:
Normal
Target version:
Affected Versions:
Effort:
low
Difficulty:
Label:

Description

During fuzzing siginit discovered two minor memory leaks in HSBuildDatabase which is caused by missing deallocators when Hyperscan fails to compile expression.

The problem is missing deallocator for expression and missing deallocator for Hyperscan error.

char *expr = HSRenderPattern(needle, needle_len);

hs_error_t err = hs_compile(expr, flags, HS_MODE_BLOCK, NULL, &db,
                             &compile_err);
if (err != HS_SUCCESS) {
    SCLogError("Unable to compile '%s' with Hyperscan, " 
               "returned %d.",
            expr, err);
    return -1;
}

SCFree(expr);


Subtasks 2 (2 open0 closed)

Bug #8167: utils-spm-hs: missing deallocators on hs_compile failure (8.0.x backport)AssignedSergey ZhidkihActions
Bug #8168: utils-spm-hs: missing deallocators on hs_compile failure (7.0.x backport)AssignedSergey ZhidkihActions

Related issues 1 (1 open0 closed)

Blocks Suricata - Security #6187: detect: handle allocation failures during rule reloadIn ProgressPhilippe AntoineActions
Actions #1

Updated by Sergey Zhidkih 27 days ago

May I claim this issue and get developer role?

Actions #2

Updated by Victor Julien 26 days ago

  • Status changed from New to Assigned
  • Assignee set to Sergey Zhidkih
  • Target version changed from TBD to 9.0.0-beta1

Thanks for looking into this. We'd need a Github PR against the main branch. After merge we probably want to backport as well.

Actions #3

Updated by Philippe Antoine 24 days ago

  • Status changed from Assigned to In Review
Actions #4

Updated by Philippe Antoine 17 days ago

  • Blocks Security #6187: detect: handle allocation failures during rule reload added
Actions #5

Updated by Victor Julien 13 days ago

  • Label Needs backport to 7.0, Needs backport to 8.0 added
Actions #6

Updated by OISF Ticketbot 13 days ago

  • Subtask #8167 added
Actions #7

Updated by OISF Ticketbot 13 days ago

  • Label deleted (Needs backport to 8.0)
Actions #8

Updated by OISF Ticketbot 13 days ago

  • Subtask #8168 added
Actions #9

Updated by OISF Ticketbot 13 days ago

  • Label deleted (Needs backport to 7.0)
Actions

Also available in: Atom PDF