https://inliniac.net/blog/tag/bug/ Recent content in Bug on Inliniac Hugo en Tue, 22 May 2007 21:54:17 +0000 https://inliniac.net/blog/2007/05/22/memory-leak-fixed-in-stream4inline/ Tue, 22 May 2007 21:54:17 +0000 https://inliniac.net/blog/2007/05/22/memory-leak-fixed-in-stream4inline/ <p>A few days ago William told me that if he enabled stream4inline on a busy gateway, Snort_inline would consume all memory within hours. The problem went away when disabling stream4inline, so it made sense that the problem would be in there somewhere.</p> <p>The first suspect was the reassembly cache. The reassembly cache is used to keep a per stream copy of the reassembled packet in memory. While being memory expensive, it greatly speeds up the <em>sliding window</em> stream reassembly process, especially with small packets. The reason for this being the first and primary suspect is that this is the only place where stream4inline code allocates memory. Reviewing the code however, showed no leaks and adding a debug counter to monitor the memory usage also showed that the leak was not in that code.</p>