Bug #991: threshold mem leak - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #991

closed

threshold mem leak

Added by Victor Julien about 11 years ago. Updated about 11 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

2.0beta2

Affected Versions:

Effort:

Difficulty:

Label:

Description

~~Dr.M~~ Error #1: LEAK 36 direct bytes 0x0a8d1d90-0x0a8d1db4 + 0 indirect bytes
~~Dr.M~~ # 0 replace_malloc                          [/work/drmemory_package/common/alloc_replace.c:2292]
~~Dr.M~~ # 1 DetectThresholdEntryAlloc               [/home/victor/dev/oisf/src/detect-engine-threshold.c:181]
~~Dr.M~~ # 2 ThresholdHandlePacketHost               [/home/victor/dev/oisf/src/detect-engine-threshold.c:240]
~~Dr.M~~ # 3 PacketAlertThreshold                    [/home/victor/dev/oisf/src/detect-engine-threshold.c:600]
~~Dr.M~~ # 4 PacketAlertHandle                       [/home/victor/dev/oisf/src/detect-engine-alert.c:107]
~~Dr.M~~ # 5 PacketAlertFinalize                     [/home/victor/dev/oisf/src/detect-engine-alert.c:235]
~~Dr.M~~ # 6 SigMatchSignatures                      [/home/victor/dev/oisf/src/detect.c:1551]
~~Dr.M~~ # 7 Detect                                  [/home/victor/dev/oisf/src/detect.c:1697]
~~Dr.M~~ # 8 TmThreadsSlotVarRun                     [/home/victor/dev/oisf/src/tm-threads.c:559]
~~Dr.M~~ # 9 TmThreadsSlotProcessPkt                 [/home/victor/dev/oisf/src/tm-threads.h:142]
~~Dr.M~~ #10 PcapFileCallbackLoop                    [/home/victor/dev/oisf/src/source-pcap-file.c:154]
~~Dr.M~~ #11 libpcap.so.0.8!?                       +0x0      (0xb75a55cb <libpcap.so.0.8+0x1a5cb>)

Can be reproduced reliably with sandnet.pcap and rbn.rules