From 61b54617821a552838fa14e6bab94a4b795b0ad8 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Thu, 5 Mar 2026 21:25:04 +0100 Subject: [PATCH] app-layer: fix uint overflow in debug assertion Krb5 can request it needs a 0xFFFFFFFF record --- src/app-layer-parser.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app-layer-parser.c b/src/app-layer-parser.c index 7f6541b6bd..ad01110b05 100644 --- a/src/app-layer-parser.c +++ b/src/app-layer-parser.c @@ -1415,7 +1415,7 @@ int AppLayerParserParse(ThreadVars *tv, AppLayerParserThreadCtx *alp_tctx, Flow goto error; } else if (res.status > 0) { DEBUG_VALIDATE_BUG_ON(res.consumed > input_len); - DEBUG_VALIDATE_BUG_ON(res.needed + res.consumed < input_len); + DEBUG_VALIDATE_BUG_ON(res.needed < input_len - res.consumed); DEBUG_VALIDATE_BUG_ON(res.needed == 0); /* incomplete is only supported for TCP */ DEBUG_VALIDATE_BUG_ON(f->proto != IPPROTO_TCP);