app-layer: fix uint overflow in debug assertion

Krb5 can request it needs a 0xFFFFFFFF record
8 months ago · 61b5461782
parent 8e886a8ecd
commit 61b5461782
1 changed files with 1 additions and 1 deletions
--- a/src/app-layer-parser.c
+++ b/src/app-layer-parser.c
@ -1415,7 +1415,7 @@ int AppLayerParserParse(ThreadVars *tv, AppLayerParserThreadCtx *alp_tctx, Flow
            goto error;
        } else if (res.status > 0) {
            DEBUG_VALIDATE_BUG_ON(res.consumed > input_len);
-            DEBUG_VALIDATE_BUG_ON(res.needed + res.consumed < input_len);
+            DEBUG_VALIDATE_BUG_ON(res.needed < input_len - res.consumed);
            DEBUG_VALIDATE_BUG_ON(res.needed == 0);
            /* incomplete is only supported for TCP */
            DEBUG_VALIDATE_BUG_ON(f->proto != IPPROTO_TCP);