mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
dd53a71ce2
parse_row_description and parse_consolidated_data_row read a field_count
from the message body and use that to iterate a slice, without checking
whether the count actually fits the body.
A backend-controlled attack could lead to fewer fields logged, or
stalling of the parser to-client direction for the duration of the flow.
A malformed_response event is set for pgsql, if either of those
message's inner parsers has a field_count that can't be reconciled with
the body slice.
A new pgsql.response log field is added to indicate this, too:
pgsql.response.row_description_malformed, a boolean. This wasn't added
to the consolidated data row message, per its summarization nature.
The row_description unit test buffer declared a length one byte longer
than its three fields occupy. The old code silently discarded that
surplus byte; the new one reports it, so the buffer was corrected.
Ticket: #8885
(cherry picked from commit
|
2 months ago | |
|---|---|---|
| .. | ||
| .cargo | 2 years ago | |
| derive | 1 year ago | |
| htp | 2 months ago | |
| src | 2 months ago | |
| suricatactl | 1 year ago | |
| suricatasc | 2 months ago | |
| sys | 2 months ago | |
| .gitignore | 2 years ago | |
| Cargo.lock.in | 2 months ago | |
| Cargo.toml.in | 8 months ago | |
| Makefile.am | 1 year ago | |
| cbindgen.toml | 5 months ago | |
| rustfmt.toml | 3 years ago | |