]> git.ipfire.org Git - thirdparty/suricata.git/commit
dcerpc: consume bytes after gap resync
authorPhilippe Antoine <pantoine@oisf.net>
Thu, 20 Feb 2025 22:36:27 +0000 (23:36 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 25 Feb 2025 14:49:27 +0000 (15:49 +0100)
commit8c3bd3e8a00b30d198cc4327c6a8005aa82035f9
tree55d5c3c966dfc7c6a7b7de0a03ec52ca6bddcd9e
parent3bc2a14fbfefddbfc241bf6d961a57c3b24835a3
dcerpc: consume bytes after gap resync

Ticket: 7567

After a gap, we search a new record that may start later than
the beginning of current stream slice.
If so, consume the first bytes before the start of the record,
so that AppLayerResult::incomplete can be consistent and not
trigger assertion !((res.needed + res.consumed < input_len))
rust/src/dcerpc/dcerpc.rs