Cyber Risks · PortSwigger Research

[MoBP] Improved memory handling

Summary: PortSwigger's Burp Suite release adds memory handling that warns users when the Java runtime allocates a modest heap at startup and alerts them to memory problems at runtime so work can be saved. The release also catches failed memory allocations more defensively, so where the proxy request queue might previously have crashed on memory failure, only individual requests are lost and an alert is raised.

Key Takeaway: Burp can generate thousands of HTTP requests and responses in a few hours of use, and a single large resource such as a flash movie, ZIP archive, or office document can trigger allocation failures - the difference now is whether that costs one request or the proxy request queue itself.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related