stream: disrupt never seen direction with async-oneside

Ticket: 8629

When we are in async-oneside mode, we see only one direction
of the traffic, and should not wait for the other direction
before cleaning up a transaction.

(cherry picked from commit 7ec9d72d28)

rust/src/core.rs

@@ -44,6 +44,7 @@ pub const STREAM_TOCLIENT: u8 = 0x08;
 pub const STREAM_GAP:      u8 = 0x10;
 pub const STREAM_DEPTH:    u8 = 0x20;
 pub const STREAM_MIDSTREAM:u8 = 0x40;
+pub const STREAM_ASYNC:    u8 = 0x80;
 
 pub const ALPROTO_UNKNOWN : AppProto = AppProtoEnum::ALPROTO_UNKNOWN as AppProto;
 pub const ALPROTO_FAILED : AppProto = AppProtoEnum::ALPROTO_FAILED as AppProto;

src/app-layer-parser.c

@@ -884,7 +884,7 @@ static void AppLayerParserFileTxHousekeeping(
     }
 }
 
-#define IS_DISRUPTED(flags) ((flags) & (STREAM_DEPTH | STREAM_GAP))
+#define IS_DISRUPTED(flags) ((flags) & (STREAM_DEPTH | STREAM_GAP | STREAM_ASYNC))
 
 extern int g_detect_disabled;
 extern bool g_file_logger_enabled;

src/flow.c

@@ -1168,6 +1168,11 @@ uint8_t FlowGetDisruptionFlags(const Flow *f, uint8_t flags)
     if (stream->flags & STREAMTCP_STREAM_FLAG_DEPTH_REACHED) {
         newflags |= STREAM_DEPTH;
     }
+    if (ssn->flags & STREAMTCP_FLAG_ASYNC) {
+        if (stream->tcp_flags == 0) {
+            newflags |= STREAM_ASYNC;
+        }
+    }
     /* todo: handle pass case (also for UDP!) */
 
     return newflags;