mirror of https://github.com/OISF/suricata
nfs: skip the rest of a partial record with a zero count
A WRITE request or READ reply with a count of 0 has no file data, and processing it returned early. For a partially received record this left the rest of the record unaccounted for, while the input was reported as consumed. The rest of the record was then parsed as the next RPC record, which failed and disabled the parser for the flow. Like the complete record path, skip the rest of the record and continue with the next record. For a READ reply this includes removing its request from the request map, as is done for a complete reply. Ticket: #9188pull/16514/head
parent
3d53f24350
commit
1522a2f6bf
Loading…
Reference in New Issue