You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust
Giuseppe Longo 8c9bca92fb rdp: treat tpkt payload as complete input
parse_t123_tpkt runs the X.224 and X.223/MCS sub-parsers over the
length-bounded tpkt payload, but they use streaming nom parsers.
An inner length field overrunning the payload, such as an oversized
CS_CORE block, escaped as Err::Incomplete although the tpkt was fully
present.

This patch wraps the child parsers in complete() so Incomplete from within the
bounded payload becomes an Error.
The tpkt is then returned as an unrecognized Raw child, which the caller skips,
and parsing resumes at the next tpkt.

Ticket #8838
2 months ago
..
.cargo
…
derive rust/ffi: move AppLayerEvent to ffi 6 months ago
ffi rust/ffi: add flow accessors to flow wrapper 2 months ago
htp http1: fix gzip decompression with flags and multiple chunks 2 months ago
src rdp: treat tpkt payload as complete input 2 months ago
suricatactl rust: limit clap verson to 4.5.57 7 months ago
suricatasc rust: clippy fixups for 1.97 4 months ago
sys rust/ffi: bindgen flow storage 2 months ago
.gitignore
…
Cargo.lock.in psl: update to 2.1.228 2 months ago
Cargo.toml.in rust: set minimum rust version to 1.85 2 months ago
Makefile.am rust: set CARGO_ENV when generating ffi bindings 2 months ago
cbindgen.toml http2: split transaction state machines 4 months ago
rustfmt.toml
…