ssl : SSLProbingParser overflow fix

Found by fuzzing
Fixes ssl detection evasion by packet splitting
pull/3824/head
Philippe Antoine 7 years ago committed by Victor Julien
parent 666bb1b6e4
commit 316a411b6b

@ -2628,7 +2628,7 @@ static AppProto SSLProbingParser(Flow *f, uint8_t direction,
uint8_t *input, uint32_t ilen, uint8_t *rdir)
{
/* probably a rst/fin sending an eof */
if (ilen == 0)
if (ilen < 3)
return ALPROTO_UNKNOWN;
/* for now just the 3 byte header ones */

Loading…
Cancel
Save