-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add commandline option to simulate alert queue expand failure - v3 (again) #7649
Conversation
For testing purposes. Meant to simulate a reallocation failure when dynamically growing the alert queue in DetectEngineThreadCtx, so we can check that Suri's behavior doesn't break under such circumstances. Task OISF#5319
Codecov Report
@@ Coverage Diff @@
## master #7649 +/- ##
==========================================
+ Coverage 75.75% 79.26% +3.51%
==========================================
Files 659 659
Lines 185743 229933 +44190
==========================================
+ Hits 140713 182265 +41552
- Misses 45030 47668 +2638
Flags with carried forward coverage won't be shown. Click here to find out more. |
ERROR: ERROR: QA failed on ips_afp_drop_chk. Pipeline 8334 |
Merged in #7653, thanks! |
Seems like this one was left Home Alone :P |
I guess you need to rebase and open a new PR as one commit out of 2 was merged |
roger that! Replaced by #7656 |
This is the same work from #7622 but in a new PR to see how the CI checks perform without the SV tests I wrote to test Suri behavior when the tmp alert queue reallocation fails.
Usage in IPS mode, to simulate a failure for debugging purposes. Command-line arguments:
--simulate-ips --simulate-alert-queue-realloc-failure
. This will return the defaultpacket_alert_max
capacity when Suri tries to expanddet_ctx->alert_queue
, instead realloc'ng.