Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix multiple Yara leaks #7615

Merged
merged 1 commit into from
Jun 13, 2022
Merged

Conversation

Smjert
Copy link
Member

@Smjert Smjert commented Jun 3, 2022

  • Use RAII structures to fix leaks around the management
    of the rules cache and the rule compiler.

  • Fix a leak in the Yara library caused by passing
    a file descriptor as the rule file that actually points
    to a directory instead of a file.

  • Minor improvements to avoid recalculating the hash
    of the rule files, used as a key into the rules cache.

Fixes #7610
Fixes #7475

- Use RAII structures to fix leaks around the management
  of the rules cache and the rule compiler.

- Fix a leak in the Yara library caused by passing
  a file descriptor as the rule file that actually points
  to a directory instead of a file.

- Minor improvements to avoid recalculating the hash
  of the rule files, used as a key into the rules cache.
@Smjert Smjert merged commit 1eb4d42 into osquery:master Jun 13, 2022
@mike-myers-tob mike-myers-tob deleted the stefano/fix/yara-leak branch June 13, 2022 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Leak in yara table Queries using Yara uses ALOT of RAM
2 participants