Bug #5113: Off-by-one in flow-manager flow_hash row allocation - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5113

closed

Off-by-one in flow-manager flow_hash row allocation

Added by Jeff Lucovsky over 2 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Jeff Lucovsky

Target version:

5.0.10

Affected Versions:

5.0.8, 6.0.4

Effort:

low

Difficulty:

Label:

Description

When configuring more than one flow manager, a single row between the per-flow-manager ranges is left-out.

The current code doesn't cover all rows when more than one flow manager is
used. It leaves a single row between ftd->max and ftd->min of the next
manager orphaned. As an example:

hash_size=1000
flowmgr_number=3
range=333

instance  ftd->min  ftd->max
0         0         333
1         334       666
2         667       1000

Rows not covered: 333, 666

PR: https://github.com/OISF/suricata/pull/6993

Related issues 1 (0 open — 1 closed)