Bug #5354: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport) - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5354

closed

Bug #5353: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails

detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)

Added by Juliana Fajardini Reichow over 2 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Juliana Fajardini Reichow

Target version:

5.0.10

Affected Versions:

6.0.6, 7.0.0-beta1

Effort:

Difficulty:

Label:

Description

This happens because `alerts.discarded` is being incremented indirectly via the DetCtx's Packet, instead of using the Packet that is passed to the function.

(Backport)

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Affected Versions 6.0.6, 7.0.0-beta1 added
Affected Versions deleted (~~5.0.8~~)

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Parent task set to #5353

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Status changed from New to In Review
Assignee changed from OISF Dev to Juliana Fajardini Reichow

PR for review: https://github.com/OISF/suricata/pull/7394

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Copied to Bug #5356: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails added

Actions

Copy link

Updated by Juliana Fajardini Reichow over 2 years ago

Subject changed from detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails to detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)

Actions

Copy link