Sqlmap: Memory leak on Windows

[Ch0c0Cube]

Hello, I have a such problem:
OS: Windows 10 1909
Sqlmap version: 1.4.3.12#dev

Memory leak when i try to dump DB.

CMD: python sqlmap.py -r "MyPath" --technique=E --dbms=mysql -D DB_name -T Table_name -C column1,column2 --dump --threads=10

its look like https://github.com/sqlmapproject/sqlmap/issues/3459
let me know if u needed memory dump or another information.

Sorry for my ENG ^_^
With respect to u!

[stamparm]

1) let me know if u needed memory dump or another information. <- this would be of a great help
2) What's the table dump size? Is sqlmap able to retrieve anything or it immediately exhausts the memory? Is there anything particular with the SQLi/server case itself (e.g. large output)

[Ch0c0Cube]

1. let me know if u needed memory dump or another information. <- this would be of a great help
2. What's the table dump size? Is sqlmap able to retrieve anything or it immediately exhausts the memory? Is there anything particular with the SQLi/server case itself (e.g. large output)

@stamparm 1. Hey! I send u email with memory dump on [email protected]_

1. Table size is 20k rows and ~2mb. Yes, sqlmap starts retrieve , and every second the memory consumption increase until a threads error occurs. Output content-length=~1130 and typical SQLi error-based injection.

[stamparm]

@Ch0c0Cube thank you for the dump. There seems to be a leak inside the Python's SSL connection handler (server certificate duplicates are piling up). Can you please tell me which version of python are you running?

[Ch0c0Cube]

@stamparm I’m happy to help u!
Iam using Python 3.7.4. Some colleagues also sight this.
Iam hope, we will fix it. U can ask me for any help!
Thx u for SQLmap.

[stamparm]

Able to reproduce :)

p.s. on Linux everything works as expected. Have to check the situation with latest Python v3 (Windows)

[stamparm]

3.7.5 does not seem to affected:

[stamparm]

Found the issue in Python's tracker:

https://bugs.python.org/issue38251

[stamparm]

Minimalistic PoC (run on Python 3.x <= 3.7.4):

#!/usr/bin/env python3

import http.client
import sys

while True:
    conn = http.client.HTTPSConnection("foobar.com", 443)

    # Note: connection not even made
    #conn.connect()
    conn.close()

    sys.stdout.write('.')
    sys.stdout.flush()

p.s. this will fill up the memory in no time
p.p.s. now I'll need to find a way how to deal with this Python 3 bug

[Ch0c0Cube]

@stamparm Hey! Thanks for helping with this issue!
Best regard!

[stamparm]

@Ch0c0Cube thank you for reporting and providing invaluable memory dump, thus helping in solving this issue

Best regards