mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
c6ef19e796
The continuation of a partial WRITE request or READ reply only covered the file data, not the XDR padding that follows it in the record. When a delivery of stream data ended on the last byte of file data, or inside the padding, the remaining padding was parsed as the start of a new RPC record, which failed and disabled the parser for the flow. Keep the chunk active while its record still has unconsumed bytes, as tracked by the record tail, and consume exactly those bytes: from the input that completes the file data and, for what is not there yet, from the next deliveries. If the file is still open the padding is passed to its file tracker, which consumes it as fill bytes, never as file data. A partial READ reply that already holds all of its file data now also has its request removed from the request map, as is done when a chunk completes. Builds on the file handle of the in-progress READ chunk added for #9192. Ticket: #9194 |
1 day ago | |
|---|---|---|
| .. | ||
| .cargo | ||
| derive | 5 days ago | |
| ffi | 1 day ago | |
| htp | 5 days ago | |
| src | 1 day ago | |
| suricatactl | 5 days ago | |
| suricatasc | 5 days ago | |
| sys | 5 days ago | |
| .gitignore | ||
| Cargo.lock.in | 5 days ago | |
| Cargo.toml.in | 5 days ago | |
| Makefile.am | 5 days ago | |
| cbindgen.toml | 4 months ago | |
| rustfmt.toml | ||