Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

suricata-7.0.2_6 - Fix heap buffer overflows identified by llvm ASAN testing in custom Legacy Blocking module. #1337

Conversation

bmeeks8
Copy link
Contributor

@bmeeks8 bmeeks8 commented Dec 20, 2023

Suricata-7.0.2_6

This update to the Suricata binary addresses two heap memory buffer overflows in the custom Legacy Blocking Module identified during testing/troubleshooting with the llvm Address Sanitizer enabled. The Legacy Blocking Module is a custom output pluging used only with the pfSense version of the package.

In addition to the bug fixes, the code within the custom module was cleaned up a bit and the Pass List logic modified to use separate Radix Trees for IPv4 and IPv6 addresses.

New Features:
none

Bug Fixes:

  1. Fix two instances of a heap memory buffer overflow identified in the Pass List processing logic of the custom Legacy Blocking Module. These overflows would randomly corrupt data in user installations resulting in issues with the Hyperscan library and occasional segfaults in the Suricata binary.

@netgate-git-updates netgate-git-updates merged commit bcb63b5 into pfsense:RELENG_2_7_2 Dec 20, 2023
@bmeeks8 bmeeks8 deleted the suricata-7.0.2_6_RELENG_2_7_2 branch December 21, 2023 00:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants