|
|
@ -415,7 +415,7 @@ pub extern "C" fn rs_krb5_probing_parser(_flow: *const Flow,
|
|
|
|
// Kerberos messages start with an APPLICATION header
|
|
|
|
// Kerberos messages start with an APPLICATION header
|
|
|
|
if hdr.class != BerClass::Application { return unsafe{ALPROTO_FAILED}; }
|
|
|
|
if hdr.class != BerClass::Application { return unsafe{ALPROTO_FAILED}; }
|
|
|
|
// Tag number should be <= 30
|
|
|
|
// Tag number should be <= 30
|
|
|
|
if hdr.tag.0 >= 30 { return unsafe{ALPROTO_FAILED}; }
|
|
|
|
if hdr.tag.0 > 30 { return unsafe{ALPROTO_FAILED}; }
|
|
|
|
// Kerberos messages contain sequences
|
|
|
|
// Kerberos messages contain sequences
|
|
|
|
if rem.is_empty() || rem[0] != 0x30 { return unsafe{ALPROTO_FAILED}; }
|
|
|
|
if rem.is_empty() || rem[0] != 0x30 { return unsafe{ALPROTO_FAILED}; }
|
|
|
|
// Check kerberos version
|
|
|
|
// Check kerberos version
|
|
|
|