https: fix memory leak with https.request() by imyller · Pull Request #8647 · nodejs/node · GitHub

Checklist

make -j4 test (UNIX), or vcbuild test nosign (Windows) passes
tests and/or benchmarks are included
commit message follows commit guidelines

Affected core subsystem(s)

https

Description of change

If calling https.request() with options.headers.host defined and options.servername undefined, https.Agent.createSocket mutates connection options after https.Agent.addRequest has created empty socket pool array with mismatching connection name.

This results in two socket pool arrays being created and only the last one gets eventually deleted by removeSocket - effectively causing a memory leak.

This commit fixes the leak by making sure that addRequest does the same modifications to options object as the createSocket.

createSocket is intentionally left unmodified to prevent userland regressions.

Test case included.

Fixes: #6687

/cc @nodejs/http @nodejs/crypto

CI: https://ci.nodejs.org/job/node-test-pull-request/4106/

I'd prefer just using hostHeader.slice() and hostHeader.indexOf(), but if others are not comfortable with that, at the very least the regex should be /:[\s\S]*$/ to match any character (including newlines).

I left the hostHeader cleanup intentionally unmodified to match the original feature implemented PR #1110

I did not want to fix two unrelated issues in single PR dedicated to memory leak.

Can you remove the extra blank lines at lines 37, 44, 48, 54, and 56.

Sure.

Extra blank lines removed

LGTM

FreeBSD CI failed due to force pushed commit

New CI run: https://ci.nodejs.org/job/node-test-pull-request/4108/

I'm going to add lts-agenda label because this leak affects current LTS release too.
Feel free to remove if fixing this in LTS is not relevant.

CI before landing: https://ci.nodejs.org/job/node-test-pull-request/4127/

LGTM

I think this line should also be removed? #8647 (comment)

Thanks. Removed extra line.

If calling `https.request()` with `options.headers.host` defined and `options.servername` undefined, `https.Agent.createSocket` mutates connection `options` after `https.Agent.addRequest` has created empty socket pool array with mismatching connection name. This results in two socket pool arrays being created and only the last one gets eventually deleted by `removeSocket` - causing a memory leak. This commit fixes the leak by making sure that `addRequest` does the same modifications to `options` object as the `createSocket`. `createSocket` is intentionally left unmodified to prevent userland regressions. Test case included. Fixes: nodejs#6687

Trying CI again due to the AIX error: https://ci.nodejs.org/job/node-test-pull-request/4179/
Seems unrelated but just to be safe...

If CI is green, I'll land this.

I'll start landing this:

Three Four LGTMs
No objections
Requested modifications have been made
CI tests passed (only unrelated CI failures)

If calling `https.request()` with `options.headers.host` defined and `options.servername` undefined, `https.Agent.createSocket` mutates connection `options` after `https.Agent.addRequest` has created empty socket pool array with mismatching connection name. This results in two socket pool arrays being created and only the last one gets eventually deleted by `removeSocket` - causing a memory leak. This commit fixes the leak by making sure that `addRequest` does the same modifications to `options` object as the `createSocket`. `createSocket` is intentionally left unmodified to prevent userland regressions. Test case included. PR-URL: nodejs#8647 Fixes: nodejs#6687 Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Jackson Tian <shvyo1987@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com>

landed in db5a879

@imyller I'm removing the agenda label for right now as there does not appear to be anything controversial about this change. After it has lived in a release for at least two weeks we can backport

If calling `https.request()` with `options.headers.host` defined and `options.servername` undefined, `https.Agent.createSocket` mutates connection `options` after `https.Agent.addRequest` has created empty socket pool array with mismatching connection name. This results in two socket pool arrays being created and only the last one gets eventually deleted by `removeSocket` - causing a memory leak. This commit fixes the leak by making sure that `addRequest` does the same modifications to `options` object as the `createSocket`. `createSocket` is intentionally left unmodified to prevent userland regressions. Test case included. PR-URL: #8647 Fixes: #6687 Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Jackson Tian <shvyo1987@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com>

nodejs-github-bot added the http Issues or PRs related to the http subsystem. label Sep 18, 2016

imyller added memory Issues and PRs related to the memory management or memory footprint. https Issues or PRs related to the https subsystem. labels Sep 18, 2016

imyller force-pushed the https-request-leak branch from 43ac439 to 0891876 Compare September 18, 2016 12:43

mscdex reviewed Sep 18, 2016

View reviewed changes

cjihrig reviewed Sep 18, 2016

View reviewed changes

imyller force-pushed the https-request-leak branch from 0891876 to b6b452c Compare September 18, 2016 12:59

cjihrig approved these changes Sep 18, 2016

View reviewed changes

indutny approved these changes Sep 18, 2016

View reviewed changes

imyller added the lts-agenda label Sep 18, 2016

Trott added the lts-watch-v4.x label Sep 18, 2016

jasnell approved these changes Sep 20, 2016

View reviewed changes

lpinca reviewed Sep 20, 2016

View reviewed changes

imyller force-pushed the https-request-leak branch from b6b452c to 4d68ae2 Compare September 20, 2016 19:51

imyller self-assigned this Sep 20, 2016

Trott force-pushed the master branch from b0df363 to c5ce7f4 Compare September 21, 2016 00:10

imyller closed this Sep 21, 2016

imyller removed their assignment Sep 21, 2016

MylesBorins removed the lts-agenda label Sep 30, 2016

imyller mentioned this pull request Oct 7, 2016

Memory leak for https.request() on ECONNRESET #8827

Closed

MylesBorins added land-on-v4.x and removed lts-watch-v4.x labels Nov 18, 2016

MylesBorins mentioned this pull request Nov 22, 2016

v4.7.0 proposal #9736

Merged

snyk-bot mentioned this pull request Jul 17, 2020

[Snyk] Security upgrade eslint from 3.19.0 to 4.0.0 adamlaska/node#38

Open

https: fix memory leak with https.request() by imyller · Pull Request #8647 · nodejs/node · GitHub

Uh oh!

Uh oh!

https: fix memory leak with https.request() - #8647

https: fix memory leak with https.request()#8647imyller wants to merge 1 commit intonodejs:masternodejs/node:masterfrom imyller:https-request-leakimyller/node:https-request-leakCopy head branch name to clipboard

Conversation

imyller commented Sep 18, 2016 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Checklist

Affected core subsystem(s)

Description of change

Uh oh!

imyller commented Sep 18, 2016

Uh oh!

mscdex Sep 18, 2016

Choose a reason for hiding this comment

Uh oh!

imyller Sep 18, 2016

Choose a reason for hiding this comment

Uh oh!

cjihrig Sep 18, 2016

Choose a reason for hiding this comment

Uh oh!

imyller Sep 18, 2016

Choose a reason for hiding this comment

Uh oh!

imyller Sep 18, 2016

Choose a reason for hiding this comment

Uh oh!

indutny commented Sep 18, 2016

Uh oh!

cjihrig left a comment

Choose a reason for hiding this comment

Uh oh!

JacksonTian commented Sep 18, 2016

Uh oh!

imyller commented Sep 18, 2016

Uh oh!

imyller commented Sep 18, 2016

Uh oh!

imyller commented Sep 19, 2016

Uh oh!

jasnell left a comment

Choose a reason for hiding this comment

Uh oh!

lpinca Sep 20, 2016

Choose a reason for hiding this comment

Uh oh!

imyller Sep 20, 2016

Choose a reason for hiding this comment

Uh oh!

jasnell commented Sep 20, 2016

Uh oh!

imyller commented Sep 20, 2016

Uh oh!

imyller commented Sep 21, 2016 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

imyller commented Sep 21, 2016

Uh oh!

MylesBorins commented Sep 30, 2016

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

10 participants

https: fix memory leak with https.request()#8647
imyller wants to merge 1 commit into
nodejs:masterfrom
imyller:https-request-leak

imyller commented Sep 18, 2016 •
edited
Loading

imyller commented Sep 21, 2016 •
edited
Loading