[Snort-devel] [2.6.1.3] Memory leak in src/sfutil/sfthd.c: sfthd_create_threshold_global; global events suppress patch

lytochkin lytochkin at ...2899...
Sat Mar 3 08:04:47 EST 2007


Hello!

Version 2.6.1.3

Function 'sfthd_create_threshold_global' does not check 'thd->sfthd_garray'
array for already allocated sfthd_node's when creating a new global suppress
rule. Specifying more than one threshold (or suppress) rules with gid=0 or
multiple sid=0 for the same gid!=0 in config leads to memory leak.

Patch is integrated with posted yesterday 6:56AM GMT '[Snort 2.6.1.3] Global
events suppress patch (+)'.
Modified patch-files can be found in attachment.

___________________
Boris Lytochkin,
JSC Avtocard-Holding, Moscow
web: www.e-port.ru, wap: wap.e-port.ru
tel: +7 (495) 777 1872, ext. 251
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-sfthd.c
Type: application/octet-stream
Size: 6628 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20070303/4694b211/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-sfthreshold.c
Type: application/octet-stream
Size: 6308 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20070303/4694b211/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-sfthd.h
Type: application/octet-stream
Size: 178 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20070303/4694b211/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-README.thresholding
Type: application/octet-stream
Size: 2950 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20070303/4694b211/attachment-0003.obj>


More information about the Snort-devel mailing list