[Snort-devel] Snort 2.9.7.0 - probably memleak in HttpInspect

souber at ...3541... souber at ...3541...
Tue Dec 9 03:54:41 EST 2014


Hi,

valgrind reports me some issue:

==17108== 1,664 (520 direct, 1,144 indirect) bytes in 13 blocks are definitely lost in loss record 27 of 33
==17108==    at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==17108==    by 0x4922AB: setApplicationData (util.h:239)
==17108==    by 0x485F53: SetNewHttpSessionData (snort_httpinspect.c:4495)
==17108==    by 0x487763: SnortHttpInspect (snort_httpinspect.c:3924)
==17108==    by 0x4805C8: HttpInspect (spp_httpinspect.c:211)
==17108==    by 0x43D69D: Preprocess (detect.c:136)
==17108==    by 0x4B344E: _flush_to_seq.isra.77 (snort_stream_tcp.c:4336)
==17108==    by 0x4B9950: StreamFlushTalker (snort_stream_tcp.c:4883)
==17108==    by 0x490837: StreamResponseFlushStream (spp_stream6.c:913)
==17108==    by 0x492373: freeSessionApplicationData (spp_session.c:1756)
==17108==    by 0x4BE475: ProcessTcp (snort_stream_tcp.c:8629)
==17108==    by 0x4C0182: StreamProcessTcp (snort_stream_tcp.c:5639)

The report is after about 15 hours work, so the leak is not big.

HTH,
Regards,
Jul.



More information about the Snort-devel mailing list