quic: do not use stack for inspection buffer

Make the inspection buffer copy the content in one buffer it owns.

Ticket: #5707
pull/8251/head
Philippe Antoine 3 years ago committed by Victor Julien
parent a2a920afb0
commit 4daee8bae1

@ -277,7 +277,8 @@ InspectionBuffer *Ja3DetectGetHash(DetectEngineThreadCtx *det_ctx,
// this adds a final zero
SCMd5HashBufferToHex(b, b_len, (char *)ja3_hash, SC_MD5_HEX_LEN + 1);
InspectionBufferSetup(det_ctx, list_id, buffer, ja3_hash, SC_MD5_HEX_LEN);
InspectionBufferSetup(det_ctx, list_id, buffer, NULL, 0);
InspectionBufferCopy(buffer, ja3_hash, SC_MD5_HEX_LEN);
InspectionBufferApplyTransforms(buffer, transforms);
}
return buffer;

Loading…
Cancel
Save