Open matoro opened 1 year ago
Thanks for the detailed report.
I see that you use version v0.5.5. Since that release we've made a couple of important changes on the develop branch. Particularly relevant here are the ones on watermarking and underlying buffer events. I haven't checked the size of that specific file you download, but if it is large enough, it may cause watermarking to kick in.
So, can you fetch the develop branch, and try it instead of v0.5.5, and report back please?
Thanks for the detailed report.
I see that you use version v0.5.5. Since that release we've made a couple of important changes on the develop branch. Particularly relevant here are the ones on watermarking and underlying buffer events. I haven't checked the size of that specific file you download, but if it is large enough, it may cause watermarking to kick in.
So, can you fetch the develop branch, and try it instead of v0.5.5, and report back please?
Thank you for looking at this. Which commit(s) specifically are you referring to? I was reviewing https://github.com/droe/sslsplit/compare/0.5.5...develop to try and get an understanding of the changes but could not see any changes with a functional impact (besides the PR for mirroring to dummy interface, which I already backported and am using).
The file is only 19KB, which is why it's so surprising! Everything works fine with files many orders of magnitude larger.
Ah, sorry, it's on the underlying-bevs-issue#303
branch: https://github.com/droe/sslsplit/compare/develop...underlying-bevs-issue%23303
But, if the file is just19KB, then I don't think that's the issue, as you guessed too.
I should try to reproduce this issue myself too.
You can also try sslproxy with a split mode proxyspec, to see if the issue is specific to sslsplit only.
I've encountered a very strange issue where attempting to download this very small file
Module-Implementation-0.09.tar.gz
from any host, encrypted or unencrypted, over IPv4 or IPv6, results insslsplit
killing the connection with the error "Terminating connection (out of memory)!". There is more than sufficient memory on the host (64GB) and the file in question is only a few KB in size anyway. I haven't observed the issue with any other similar files (tarballs from CPAN), but it is perfectly reproducible with this specific file, even whensslsplit
is compiled with no optimization.This file is available at both of the following URLs:
Note that the first URL is unencrypted. When attempting to download this file, here are the client-side and server-side logs:
When downloading the encrypted file:
Backtrace:
sslsplit
server:Config file: