Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

memory leak #347

Open
fyy-100 opened this issue Feb 11, 2022 · 2 comments
Open

memory leak #347

fyy-100 opened this issue Feb 11, 2022 · 2 comments

Comments

@fyy-100
Copy link

fyy-100 commented Feb 11, 2022

function: htp_mpart_part_handle_data
line: part->parser->pending_header_line = bstr_add_mem(part->parser->pending_header_line, data, len);

if memory not enough, bstr_add_mem return NULL but not free part->parser->pending_header_line old memory

@catenacyber
Copy link
Contributor

Thanks for this report, would you like to submit a fix ?
Suricata does not use this part of libhtp (multipart parsing)
What do you use libhtp for ?

@fyy-100
Copy link
Author

fyy-100 commented Mar 8, 2022

I try to use libhtp to instead of nginx with modsecurity :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants