]> git.ipfire.org Git - thirdparty/suricata.git/commit
smb/dce_opnum: use DCERPC_TYPE_REQUEST
authorEloy Pérez González <zer1t0ps@protonmail.com>
Fri, 22 Oct 2021 13:00:11 +0000 (15:00 +0200)
committerShivani Bhardwaj <shivanib134@gmail.com>
Wed, 9 Feb 2022 14:31:38 +0000 (20:01 +0530)
commit97d90ea62c89426278419278304c27537cdd1b6d
treedbf99e27be68e8bd2c62e6794b7b014bb2bcb5c7
parent0e299c30eb1369a1c2abe6e658777a4fbd29cea1
smb/dce_opnum: use DCERPC_TYPE_REQUEST

The smb dce_opnum keyword doesn't match the dcerpc requests/responses.
This occurs because in the rs_smb_tx_match_dce_opnum function, the
x.req_cmd is matched against the erroneous code 1. Fix this by using
DCERPC_TYPE_REQUEST for the comparison instead.

Ticket: 4767
(cherry picked from commit 8dca3d0416f539f5086f72f69d71cfc418355a2f)
rust/src/smb/detect.rs