Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[appsec] Chan may block if runtime error occurs #3421

Open
LaurenceJJones opened this issue Jan 21, 2025 · 2 comments
Open

[appsec] Chan may block if runtime error occurs #3421

LaurenceJJones opened this issue Jan 21, 2025 · 2 comments

Comments

@LaurenceJJones
Copy link
Contributor

Whilst debugging various things I saw there is a chance the mux handler may get blocked due to error that can occur at runtime if we return an error:

err := r.ProcessInBandRules(request)
if err != nil {
logger.Errorf("unable to process InBand rules: %s", err)
return
}

can create an error and return early which means:

response := <-parsedRequest.ResponseChannel

Channel can be blocked due to never sending a response across the parsed ResponseChannel

At the current time of writing this has never been seen by anyone but it is a potential issue that can arise in future if we do not handle it properly.

Copy link

@LaurenceJJones: Thanks for opening an issue, it is currently awaiting triage.

In the meantime, you can:

  1. Check Crowdsec Documentation to see if your issue can be self resolved.
  2. You can also join our Discord.
  3. Check Releases to make sure your agent is on the latest version.
Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

Copy link

@LaurenceJJones: There are no 'kind' label on this issue. You need a 'kind' label to start the triage process.

  • /kind feature
  • /kind enhancement
  • /kind refactoring
  • /kind bug
  • /kind packaging
Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant