zaproxy / zaproxy

The ZAP core project
https://www.zaproxy.org
Apache License 2.0
12.51k stars 2.24k forks source link

ZAP crashed when autoscanning specific site on Windows 10 x64 #8497

Closed JuraLys closed 4 months ago

JuraLys commented 4 months ago

Describe the bug

ZAP crashed when autoscanning specific site on Windows 10 x64

Steps to reproduce the behavior

Start ZAP and run autoscan for ukrdia.com.ua site

Expected behavior

ZAP should not crash

Software versions

ZAP Version: 2.15.0

Installed Add-ons: [[id=alertFilters, version=21.0.0], [id=ascanrules, version=66.0.0], [id=ascanrulesBeta, version=53.0.0], [id=authhelper, version=0.13.0], [id=automation, version=0.40.0], [id=bruteforce, version=16.0.0], [id=callhome, version=0.12.0], [id=commonlib, version=1.26.0], [id=coreLang, version=15.0.0], [id=custompayloads, version=0.13.0], [id=database, version=0.4.0], [id=diff, version=15.0.0], [id=directorylistv1, version=8.0.0], [id=directorylistv2_3, version=4.0.0], [id=directorylistv2_3_lc, version=4.0.0], [id=domxss, version=19.0.0], [id=encoder, version=1.5.0], [id=exim, version=0.9.0], [id=formhandler, version=6.6.0], [id=fuzz, version=13.13.0], [id=gettingStarted, version=17.0.0], [id=graaljs, version=0.7.0], [id=graphql, version=0.24.0], [id=groovy, version=3.2.0], [id=help, version=18.0.0], [id=hud, version=0.19.0], [id=imagelocationscanner, version=5.0.0], [id=invoke, version=15.0.0], [id=jruby, version=8.0.0], [id=jython, version=15.0.0], [id=network, version=0.16.0], [id=oast, version=0.18.0], [id=onlineMenu, version=13.0.0], [id=openapi, version=41.0.0], [id=plugnhack, version=13.0.0], [id=portscan, version=10.0.0], [id=postman, version=0.4.0], [id=pscanrules, version=58.0.0], [id=pscanrulesBeta, version=37.0.0], [id=quickstart, version=47.0.0], [id=replacer, version=18.0.0], [id=reports, version=0.32.0], [id=requester, version=7.6.0], [id=retest, version=0.9.0], [id=retire, version=0.35.0], [id=reveal, version=8.0.0], [id=scripts, version=45.4.0], [id=selenium, version=15.23.0], [id=soap, version=23.0.0], [id=spider, version=0.11.0], [id=spiderAjax, version=23.19.0], [id=sqliplugin, version=15.0.0], [id=svndigger, version=4.0.0], [id=tips, version=13.0.0], [id=tokengen, version=15.0.0], [id=treetools, version=8.0.0], [id=wappalyzer, version=21.36.0], [id=webdriverwindows, version=86.0.0], [id=websocket, version=31.0.0], [id=zest, version=45.0.0]]

Operating System: Windows 10 Architecture: amd64 CPU Cores: 8 Max Memory: 8 GB Java Version: Eclipse Adoptium 21.0.1 System's Locale: uk_UA Display Locale: en_GB Format Locale: uk_UA Default Charset: UTF-8 ZAP Home Directory: C:\Users\Admin\ZAP\ ZAP Installation Directory: C:\Program Files\ZAP\Zed Attack Proxy.\ Look and Feel: Metal (javax.swing.plaf.metal.MetalLookAndFeel)

Screenshots

No response

Errors from the zap.log file

zap.log

Additional context

No response

Would you like to help fix this issue?

psiinon commented 4 months ago

Caused by: java.lang.OutOfMemoryError

Please check the log before raising issues like this.

JuraLys commented 4 months ago

but scan completed successfully after second run, see report 2024-05-23-ZAP-Report-ukrdia.com.ua.html.zip

psiinon commented 4 months ago

We will close any issues raised where the logs show an OutOfMemory error. We know that ZAP memory management could be better, but this is currently "as designed" rather than a bug. Hopefully at some point in the future we'll have enough (people) resources to address it.

thc202 commented 4 months ago

It's also being tracked in other issues.

github-actions[bot] commented 4 weeks ago

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.