cancel
Showing results for 
Search instead for 
Did you mean: 
fw
Level 7
Report Inappropriate Content
Message 1 of 7

Nonpaged pool memory leak with WSL on Windows 10

Using WSL on Windows on a system with ENS 10.5 installed I ran into a nonpage pool memory leak in the pool tagged with MFE0.

During a web search I encountered an earlier question whcih suggests that the pool with that tag belongs to McAfee - https://community.mcafee.com/t5/VirusScan-Enterprise-VSE/VirusScan-Enterprise-leaks-nonpaged-pool/m-...

All the information I collected can be found in a report I filed with the WSL people:

https://github.com/Microsoft/WSL/issues/2917

I am using Windows 10 Version 1709 (OS Build 16299.214) and ENS 10.5.3.3178.

Sorry for not putting all in the information in the post again. If you need any more information feel free to ask.

6 Replies
Highlighted

Re: Nonpaged pool memory leak with WSL on Windows 10

Heads up, I just had this problem on a new laptop.
Compiled Linux 2 times in WSL, and voilla according to taskmanager all 16GB of RAM were exhausted, and Windows wasn't able to shut down anymore. Reboot still worked however.

Re: Nonpaged pool memory leak with WSL on Windows 10

Some more details on how to reproduce:
Get any Windows 10 System that has Windows Subsystem for Linux installed
Install Ubuntu from the Store

Install dependencies for compiling Linux
sudo apt update
sudo apt install build-essential bison flex bc

Install Linaro arm toolchain (I have a feeling any toolchain, targeting any cpu architecture, will work)
wget https://releases.linaro.org/components/toolchain/binaries/latest/arm-linux-gnueabihf/gcc-linaro-7.2....
sudo tar -C /opt -xf gcc-linaro-7.2.1-2017.11-x86_64_arm-linux-gnueabihf.tar.xz

Get Linux source code
git clone https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux.git

Compile it
export ARCH=arm CROSS_COMPILE=/opt/gcc-linaro-7.2.1-2017.11-x86_64_arm-linux-gnueabihf/bin/arm-linux-gnueabihf-
cd linux
make mrproper
make dove_defconfig
make -j4 dtbs zImage modules

Watch RAM usage in Task Manager. Once the build has finished, no visible process will be using a huge chunk of yuour memory, only released on the next reboot.

 

Noteworthy:
After uninstalling Mc-Afee, and then rerunning make mrproper, make dove_defconfig, make
The RAM usage no longer grows unreasonably, and the system stays usable.

Re: Nonpaged pool memory leak with WSL on Windows 10

I am having exactly the same issue. 

You do not even need to install a toolchain and cross compile.

If you just compile using make the problem will happen. 

 

McAfee Employee dmcgeary
McAfee Employee
Report Inappropriate Content
Message 5 of 7

Re: Nonpaged pool memory leak with WSL on Windows 10

Greetings,

 There is a leak in pooltag MFE0 that can be very evident when compiling code. 
I am working to have the known issues KB82450 updated.

Re: Nonpaged pool memory leak with WSL on Windows 10

Is there a fix for this yet?

Re: Nonpaged pool memory leak with WSL on Windows 10

WSL is important for us.

Any proceeding with this issue ?

Regards

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center