Browse code

bb12118: Lowering the default PCRERecMatchLimit from 5000 to 2000, to minimize risk of segfault due to bug in older versions of libpcre/libpcrev2.

Micah Snyder authored on 2018/07/11 04:20:51
Showing 5 changed files
... ...
@@ -626,7 +626,7 @@ Negative values are not allowed and values > PCREMatchLimit are superfluous.
626 626
 .br
627 627
 WARNING: setting this limit too high may severely impact performance.
628 628
 .br
629
-Default: 5000
629
+Default: 2000
630 630
 .TP
631 631
 \fBPCREMaxFileSize SIZE\fR
632 632
 This option sets the maximum filesize for which PCRE subsigs will be executed.
... ...
@@ -239,7 +239,7 @@ This option sets the maximum recursive calls to HWP3 parsing function (default:
239 239
 Maximum calls to the PCRE match function (default: 100000).
240 240
 .TP
241 241
 \fB\-\-pcre-recmatch-limit=#n\fR
242
-Maximum recursive calls to the PCRE match function (default: 5000).
242
+Maximum recursive calls to the PCRE match function (default: 2000).
243 243
 .TP
244 244
 \fB\-\-pcre-max-filesize=#n\fR
245 245
 Maximum size file to perform PCRE subsig matching (default: 25 MB, max: <4 GB).
... ...
@@ -576,7 +576,7 @@ Example
576 576
 # For more information on match_limit_recursion, see the PCRE documentation.
577 577
 # Negative values are not allowed and values > PCREMatchLimit are superfluous.
578 578
 # WARNING: setting this limit too high may severely impact performance.
579
-# Default: 5000
579
+# Default: 2000
580 580
 #PCRERecMatchLimit 10000
581 581
 
582 582
 # This option sets the maximum filesize for which PCRE subsigs will be
... ...
@@ -50,7 +50,7 @@
50 50
 
51 51
 /* TODO - set better defaults */
52 52
 #define CLI_DEFAULT_PCRE_MATCH_LIMIT     100000
53
-#define CLI_DEFAULT_PCRE_RECMATCH_LIMIT  5000
53
+#define CLI_DEFAULT_PCRE_RECMATCH_LIMIT  2000
54 54
 #define CLI_DEFAULT_PCRE_MAX_FILESIZE    26214400
55 55
 
56 56
 #endif
... ...
@@ -535,7 +535,7 @@ TCPAddr 127.0.0.1
535 535
 # For more information on match_limit_recursion, see the PCRE documentation.
536 536
 # Negative values are not allowed and values > PCREMatchLimit are superfluous.
537 537
 # WARNING: setting this limit too high may severely impact performance.
538
-# Default: 5000
538
+# Default: 2000
539 539
 #PCRERecMatchLimit 10000
540 540
 
541 541
 # This option sets the maximum filesize for which PCRE subsigs will be executed.