kerberos: fix probing parser tag condition

according to the comment
4 years ago · cb150e97d0
parent abb3cc85d5
commit cb150e97d0
1 changed files with 1 additions and 1 deletions
--- a/rust/src/krb/krb5.rs
+++ b/rust/src/krb/krb5.rs
@ -415,7 +415,7 @@ pub extern "C" fn rs_krb5_probing_parser(_flow: *const Flow,
            // Kerberos messages start with an APPLICATION header
            if hdr.class != BerClass::Application { return unsafe{ALPROTO_FAILED}; }
            // Tag number should be <= 30
-            if hdr.tag.0 >= 30 { return unsafe{ALPROTO_FAILED}; }
+            if hdr.tag.0 > 30 { return unsafe{ALPROTO_FAILED}; }
            // Kerberos messages contain sequences
            if rem.is_empty() || rem[0] != 0x30 { return unsafe{ALPROTO_FAILED}; }
            // Check kerberos version