]> git.ipfire.org Git - thirdparty/suricata.git/commit
tls: handle incomplete header sooner
authorVictor Julien <vjulien@oisf.net>
Wed, 21 Sep 2022 17:56:45 +0000 (19:56 +0200)
committerVictor Julien <vjulien@oisf.net>
Fri, 13 Jan 2023 11:33:04 +0000 (12:33 +0100)
commitf0d9cc5a5e9d803598d4095e7c0cf52dfb2acc6d
tree2532ac4d5c5eb458c7e5d2c043163eb8c952c011
parent541945f4a86323de0ff06c13df6fdbb2a5b50be4
tls: handle incomplete header sooner

Make sure to exit the parser early on incomplete header data.

Additionally, make sure to not create duplicated tls frames in this
case.

Add a debug validation check for the header parser parsing too much
data, which should never happen.

(cherry picked from commit 1701a6b14c0fef6a374368a31c8a0d753b574b9c)
src/app-layer-ssl.c