]> git.ipfire.org Git - thirdparty/suricata.git/commit
quic: handle fragmented hello over multiple packets
authorPhilippe Antoine <pantoine@oisf.net>
Mon, 17 Feb 2025 10:13:20 +0000 (11:13 +0100)
committerVictor Julien <victor@inliniac.net>
Wed, 19 Feb 2025 15:34:12 +0000 (16:34 +0100)
commitf295cc059d0fb9666ff48b5156235f1aa611d010
treee3fc1adf539b048756815d9d88e50dd7ee9ef7aa
parent68adc87bd20f0b09a95871ead88a558f4c94e788
quic: handle fragmented hello over multiple packets

Ticket: 7556

To do so, we need to add 2 buffers (one for each direction)
to the QuicState structure, so that on parsing the second packet
with hello/crypto fragment, we still have the data of the first
hello/crypto fragment.

Use a hardcoded limit so that these buffers cannot grow indefinitely
and set an event when reaching the limit
rules/quic-events.rules
rust/src/quic/frames.rs
rust/src/quic/parser.rs
rust/src/quic/quic.rs