mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
a28b68af08
The queue-limit work computed the record tail and the chunk promise from the declared size, and added a count or a data length to it. A padded or segmented record therefore left a promise armed past the end of its record: a continuation could run on into the next RPC, an input that carries only record slack grew the out-of-order queue and truncated a file whose queued data fits, and the backstop walked the transactions of a call that holds no file transaction at all. Take the promise from the record itself, with record_tail(): what its marker claims minus what the parser holds. Keep its two halves apart: the stream side is the record tail, the queue side is the file data the tracker still misses, so a continuation queues no more than its own bytes. A pad a record carries is inside its claim, so the tail drains it; it is neither file data nor fill. Release a promise whose transaction is gone instead of consuming toward the claim, run the backstop only when the call carries data and the state holds a file transaction, and count a chunk only for input that carries file data. A consume past the end of an input is now a debug assertion, with the advance clamped to the input. Ticket: #9263. |
1 day ago | |
|---|---|---|
| .. | ||
| applayertemplate | 5 months ago | |
| asn1 | 5 months ago | |
| bittorrent_dht | 5 months ago | |
| dcerpc | 5 days ago | |
| detect | 1 week ago | |
| dhcp | 2 months ago | |
| dnp3 | 3 weeks ago | |
| dns | 3 weeks ago | |
| enip | 3 weeks ago | |
| ffi | 5 months ago | |
| ftp | 1 week ago | |
| http2 | 5 days ago | |
| ike | 2 months ago | |
| krb | 3 weeks ago | |
| ldap | 3 weeks ago | |
| llmnr | 5 months ago | |
| mdns | 11 months ago | |
| mime | 4 months ago | |
| modbus | 3 months ago | |
| mqtt | 3 weeks ago | |
| nfs | 1 day ago | |
| ntp | 3 weeks ago | |
| pgsql | 1 month ago | |
| pop3 | 9 months ago | |
| quic | 5 months ago | |
| rdp | 2 months ago | |
| rfb | 3 weeks ago | |
| sctp | 3 weeks ago | |
| sdp | 4 months ago | |
| sip | 4 months ago | |
| smb | 4 weeks ago | |
| snmp | 3 weeks ago | |
| ssh | 3 weeks ago | |
| telnet | 5 months ago | |
| tftp | 5 months ago | |
| utils | 5 months ago | |
| websocket | 3 weeks ago | |
| x509 | 2 months ago | |
| applayer.rs | 4 months ago | |
| common.rs | 4 months ago | |
| conf.rs | 4 months ago | |
| core.rs | 4 months ago | |
| debug.rs | 4 months ago | |
| encryption.rs | 4 months ago | |
| feature.rs | 4 months ago | |
| filecontainer.rs | 11 months ago | |
| filetracker.rs | 1 day ago | |
| flow.rs | 9 months ago | |
| frames.rs | 4 months ago | |
| handshake.rs | 4 months ago | |
| ja4.rs | 1 year ago | |
| jsonbuilder.rs | 2 months ago | |
| kerberos.rs | 4 months ago | |
| lib.rs | 2 months ago | |
| lua.rs | 4 months ago | |
| lzma.rs | 2 months ago | |
| tls_version.rs | 1 year ago | |
| util.rs | 4 months ago | |