[Bro-Dev] #574: More exessive memory usage

[Bro Tracker]

#574: More exessive memory usage
----------------------+------------------------
  Reporter:  gregor   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  High     |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:  beta
----------------------+------------------------

Comment (by jsiwek):

 > In general the C++ code should always check whether there's an event
 handler for a particular event before allocating val_list for it (both, to
 prevent leaks and to not waste time allocating stuff we never need). If it
 doesn't that's a bug. Do you know which event were causing the problem? We
 should try to fix the problem there too.

 The ones I was seeing were `Analyzer::ProtocolViolation()` creating the
 `protocol_confirmation` event when the DPD framework isn't loaded and thus
 that event has no handler body defined. (`procotol_violation` looks like
 it will behave similarly).

 Then there was `Reporter::Weird`s constructing `val_list`s when the notice
 framework wasn't loaded and there were no weird event handlers.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/574#comment:13>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker