[Oisf-devel] LuaJIT running out of memory causing Suricata crashes?
Victor Julien
victor at inliniac.net
Wed Dec 4 12:16:24 UTC 2013
On 12/04/2013 01:13 PM, Victor Julien wrote:
> On 12/04/2013 12:56 PM, Victor Julien wrote:
>> On 12/04/2013 12:37 PM, Chris Wakelin wrote:
>>>> [32578] 4/12/2013 -- 11:18:50 - (detect-luajit.c:281) <Info> (DetectLuajitMatchBuffer) -- failed to run script: not enough memory
>>> I guess we could add more checks to the Lua scripts to avoid the
>>> zlib/xor errors, which occur all the time, but I think they're probably
>>> not significant. Is there a way we could prevent or at least debug the
>>> "not enough memory" errors which are presumably what causes Suricata to
>>> crash?
>>
>> Maybe you can try inserting a "return 0" on line 282, so:
>>
>> int retval = lua_pcall(tluajit->luastate, 1, 1, 0);
>> if (retval != 0) {
>> SCLogInfo("failed to run script: %s",
>> lua_tostring(tluajit->luastate, -1));
>> return 0;
>> }
>>
>
> Actually, please ignore this. I found that the lua state isn't cleared
> properly, will send a test patch in a few minutes.
>
Can you try the attached patch?
--
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-lua-clear-stack-after-each-script-run.patch
Type: application/mbox
Size: 1080 bytes
Desc: not available
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20131204/da983f81/attachment.mbox>
More information about the Oisf-devel
mailing list