fix setting the right value for parsed bytes in case of fragmented BIND dce PDUs

15 years ago · b7a57c5210
parent b94eaec7c2
commit b7a57c5210
1 changed files with 3 additions and 3 deletions
--- a/src/app-layer-dcerpc.c
+++ b/src/app-layer-dcerpc.c
@ -481,9 +481,9 @@ static uint32_t DCERPCParseBINDCTXItem(DCERPC *dcerpc, uint8_t *input, uint32_t
                        }
 #endif
                        dcerpc->dcerpcbindbindack.numctxitemsleft--;
-                        dcerpc->bytesprocessed += (44);
-                        dcerpc->dcerpcbindbindack.ctxbytesprocessed += (44);
-                        SCReturnUInt(44U);
+                        dcerpc->bytesprocessed += (p - input);
+                        dcerpc->dcerpcbindbindack.ctxbytesprocessed += (p - input);
+                        SCReturnUInt((uint32_t)(p - input));
                    }
                } else {
                    SCLogDebug("ctxitem %u, expected %u\n", dcerpc->dcerpcbindbindack.ctxid,