]> git.ipfire.org Git - thirdparty/suricata.git/commit
ssh: avoid quadratic complexity from long banner
authorPhilippe Antoine <pantoine@oisf.net>
Thu, 22 Feb 2024 09:14:36 +0000 (10:14 +0100)
committerVictor Julien <vjulien@oisf.net>
Mon, 18 Mar 2024 15:42:06 +0000 (16:42 +0100)
commit271ed2008bb7392ca2803ab6dac8952491616151
tree8f1bcdfb9156624d756cd8a9c0235ae5e73b440e
parentcc3b4b01ec285d481e7ddcc7e062d1c8ec3b542c
ssh: avoid quadratic complexity from long banner

Ticket: 6799

When we find an overlong banner, we get into the state just
waiting for end of line, and we just want to skip the bytes
until then.
Returning AppLayerResult::incomplete made TCP engine retain
the bytes and grow the buffer that we parsed again and again...
rust/src/ssh/ssh.rs