mirror of https://github.com/OISF/suricata
nfs: skip the rest of a partial record with a zero count
A WRITE request or READ reply with a count of 0 has no file data, and processing it returned early. For a partially received record this left the rest of the record unaccounted for, while the input was reported as consumed. The rest of the record was then parsed as the next RPC record, which failed and disabled the parser for the flow. Like the complete record path, skip the rest of the record and continue with the next record. For a READ reply this includes removing its request from the request map, as is done for a complete reply. Ticket: #9188pull/16529/head
parent
9915449327
commit
fd7acaae94
Loading…
Reference in New Issue