Project

General

Profile

Actions

Bug #8146

open

utils-spm-hs: missing deallocators on hs_compile failure

Added by Sergey Zhidkih about 2 months ago. Updated 5 days ago.

Status:
Resolved
Priority:
Normal
Target version:
Affected Versions:
Effort:
low
Difficulty:
Label:

Description

During fuzzing siginit discovered two minor memory leaks in HSBuildDatabase which is caused by missing deallocators when Hyperscan fails to compile expression.

The problem is missing deallocator for expression and missing deallocator for Hyperscan error.

char *expr = HSRenderPattern(needle, needle_len);

hs_error_t err = hs_compile(expr, flags, HS_MODE_BLOCK, NULL, &db,
                             &compile_err);
if (err != HS_SUCCESS) {
    SCLogError("Unable to compile '%s' with Hyperscan, " 
               "returned %d.",
            expr, err);
    return -1;
}

SCFree(expr);


Subtasks 2 (2 open0 closed)

Bug #8167: utils-spm-hs: missing deallocators on hs_compile failure (8.0.x backport)AssignedSergey ZhidkihActions
Bug #8168: utils-spm-hs: missing deallocators on hs_compile failure (7.0.x backport)AssignedSergey ZhidkihActions

Related issues 1 (1 open0 closed)

Blocks Suricata - Security #6187: detect: handle allocation failures during rule reloadIn ProgressPhilippe AntoineActions
Actions #1

Updated by Sergey Zhidkih about 2 months ago

May I claim this issue and get developer role?

Actions #2

Updated by Victor Julien about 2 months ago

  • Status changed from New to Assigned
  • Assignee set to Sergey Zhidkih
  • Target version changed from TBD to 9.0.0-beta1

Thanks for looking into this. We'd need a Github PR against the main branch. After merge we probably want to backport as well.

Actions #3

Updated by Philippe Antoine about 2 months ago

  • Status changed from Assigned to In Review
Actions #4

Updated by Philippe Antoine about 1 month ago

  • Blocks Security #6187: detect: handle allocation failures during rule reload added
Actions #5

Updated by Victor Julien about 1 month ago

  • Label Needs backport to 7.0, Needs backport to 8.0 added
Actions #6

Updated by OISF Ticketbot about 1 month ago

  • Subtask #8167 added
Actions #7

Updated by OISF Ticketbot about 1 month ago

  • Label deleted (Needs backport to 8.0)
Actions #8

Updated by OISF Ticketbot about 1 month ago

  • Subtask #8168 added
Actions #9

Updated by OISF Ticketbot about 1 month ago

  • Label deleted (Needs backport to 7.0)
Actions #10

Updated by Philippe Antoine 5 days ago

  • Status changed from In Review to Resolved
Actions

Also available in: Atom PDF