github_mirrors/attachment
3
0
Fork 1
mirror of https://github.com/openappsec/attachment.git synced 2025-12-31 13:49:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix oom

Browse Source
This commit is contained in:
wiaamm
2025-12-02 15:16:11 +02:00
parent f6d101f470
commit 1db160beea
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
attachments/kong/plugins/open-appsec-waf-kong-plugin/handler.lua
View File

@@ -272,6 +272,15 @@ function NanoHandler.body_filter(conf)
local ctx = kong.ctx.plugin local ctx = kong.ctx.plugin
if ctx.blocked then if ctx.blocked then
kong.log.err("3-BLOCKED: returning early") kong.log.err("3-BLOCKED: returning early")
-- If EOF and session still exists, cleanup to prevent memory leak
if eof and ctx.session_data and not ctx.session_cleaned then
kong.log.err("3-BLOCKED + EOF: cleaning up session to prevent memory leak")
nano.fini_session(ctx.session_data)
nano.cleanup_all()
ctx.session_id = nil
ctx.session_data = nil
ctx.session_cleaned = true
end
return return
end end
@@ -301,6 +310,7 @@ function NanoHandler.body_filter(conf)
kong.log.err("SETTING inspection_complete=true in body_filter (TIMEOUT)") kong.log.err("SETTING inspection_complete=true in body_filter (TIMEOUT)")
kong.log.err("------------------------------------------------------------------------") kong.log.err("------------------------------------------------------------------------")
ctx.inspection_complete = true ctx.inspection_complete = true
ctx.session_cleaned = true
nano.fini_session(session_data) nano.fini_session(session_data)
nano.cleanup_all() nano.cleanup_all()
ctx.session_id = nil ctx.session_id = nil
@@ -334,6 +344,7 @@ function NanoHandler.body_filter(conf)
if verdict == nano.AttachmentVerdict.DROP then if verdict == nano.AttachmentVerdict.DROP then
ctx.plugin.blocked = true ctx.plugin.blocked = true
ctx.inspection_complete = true ctx.inspection_complete = true
ctx.session_cleaned = true
local custom_result = nano.handle_custom_response(session_data, response) local custom_result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
nano.cleanup_all() nano.cleanup_all()
@@ -366,6 +377,7 @@ function NanoHandler.body_filter(conf)
if verdict == nano.AttachmentVerdict.DROP then if verdict == nano.AttachmentVerdict.DROP then
ctx.plugin.blocked = true ctx.plugin.blocked = true
ctx.inspection_complete = true ctx.inspection_complete = true
ctx.session_cleaned = true
local custom_result = nano.handle_custom_response(session_data, response) local custom_result = nano.handle_custom_response(session_data, response)
nano.fini_session(session_data) nano.fini_session(session_data)
nano.cleanup_all() nano.cleanup_all()
@@ -378,6 +390,7 @@ function NanoHandler.body_filter(conf)
kong.log.err("SETTING inspection_complete=true in body_filter (EOF processing complete)") kong.log.err("SETTING inspection_complete=true in body_filter (EOF processing complete)")
kong.log.err("------------------------------------------------------------------------") kong.log.err("------------------------------------------------------------------------")
ctx.inspection_complete = true ctx.inspection_complete = true
ctx.session_cleaned = true
kong.log.err("EOF reached - finalizing session in body_filter") kong.log.err("EOF reached - finalizing session in body_filter")
nano.fini_session(session_data) nano.fini_session(session_data)