From fc53b2ecd5272a85aea029b65344b99846e042ff Mon Sep 17 00:00:00 2001 From: Mats Klepsland Date: Fri, 19 Oct 2018 23:00:42 +0200 Subject: [PATCH] app-layer-ssl: fix JA3 bug in TLS extension decoding --- src/app-layer-ssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app-layer-ssl.c b/src/app-layer-ssl.c index 6c823da8c0..d0c99b69b9 100644 --- a/src/app-layer-ssl.c +++ b/src/app-layer-ssl.c @@ -1197,6 +1197,7 @@ static inline int TLSDecodeHSHelloExtensions(SSLState *ssl_state, } } +next: if ((ssl_state->current_flags & SSL_AL_FLAG_STATE_CLIENT_HELLO) && ssl_config.enable_ja3) { if (TLSDecodeValueIsGREASE(ext_type) != 1) { @@ -1206,7 +1207,6 @@ static inline int TLSDecodeHSHelloExtensions(SSLState *ssl_state, } } -next: processed_len += ext_len + 4; }