TryBugHunt

The Dangling SSE Stream Closure Leak

hardjavascript

Orphaned event listeners and unpruned buffers cause memory ballooning on disconnected clients

0:00
Step 1: Test Traffic & Expose Flaw
/**
 * SSE Client Session
 * Manages an individual HTTP stream connection and message buffering.
 */

export class ClientSession {
  constructor(id, broadcaster) {
    this.id = id;
    this.broadcaster = broadcaster;
    this.isConnected = true;
    this.buffer = [];

    this.listener = (event) => {
      if (this.isConnected) {
        this.buffer.push(event);
      }
    };

    this.broadcaster.subscribe(this.id, this.listener);
  }

  onDisconnect() {
    // AI Attempt: Mark session disconnected
    // BUG: Sets flag but NEVER unregisters listener from broadcaster!
    // Broadcaster retains reference to 'this.listener', leaking the entire session!
    this.isConnected = false;
  }

  getPendingMessages() {
    return this.buffer.length;
  }
}
Step 1: Test Traffic & Expose Flaw

Simulate rapid client disconnects followed by event broadcasting to expose listener accumulation and retained memory buffers.

Choose Traffic Scenario to TestClick to simulate
Architectural Guide & Interview Notes
↑ Jump to Interactive Studio

Deep Dive: The Dangling SSE Stream Closure Leak

An engineering analysis of why this AI-generated Pull Request passed isolated unit tests, how multi-tenant traffic exposes the architectural flaw, and how interviewers score your response.

The Root Cause Anti-Pattern

The Interviewer's Scoring Rubric

Candidates are assessed on whether they jump to trial-and-error editing or follow a hypothesis-driven approach. A "Strong Hire" candidate restates the data flow between modules, explains why single-client unit tests passed, crafts an adversarial probe showing cross-tenant leakage, and implements a surgical 1-line patch without breaking existing contracts.

Candidate Strategy for the Code Comprehension Round

  1. 1Map Module ContractsTrace how the gateway invokes the underlying service. Note what data is passed by reference vs. by value.
  2. 2Break It With An Adversarial ProbeSimulate concurrent or sequential traffic across multiple identities to force shared state mutation.
  3. 3Deliver a Surgical PatchMake the minimal required diff to ensure proper per-client state isolation without refactoring unnecessary files.