intel / intel/gprofiler

Potential resource exhaustion in CommandManager.enqueue_command may impact Availability

Open
#1,053 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
826
Forks
79
PR merge metrics
No merged PRs in 30d

Description

A potential resource exhaustion vulnerability has been identified in gProfiler's command queue management related to queue size handling.

Impact: This could affect service availability under certain conditions.
Under certain conditions, this could lead to unbounded memory growth in the gProfiler agent.

Contributor guide

Open the contributing guide

Research direction

Start by locating CommandManager.enqueue_command and tracing how command queue size is handled. Reproduce the stated conditions if possible and determine how unbounded memory growth occurs; done means the queue no longer permits resource exhaustion and the behavior is covered by an appropriate regression check.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
backend, performance, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.