]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2fbfd6e) | patch
icmpv4: improve dest unreachable logic
authorVictor Julien <victor@inliniac.net>
Wed, 16 Dec 2015 09:45:05 +0000 (10:45 +0100)
committerVictor Julien <victor@inliniac.net>
Thu, 17 Dec 2015 14:19:58 +0000 (15:19 +0100)
commitfe445367bda6da335eddd6d320b48e01493af94d
treecc072e7bd66ba57734a24b080a8aa63192d7884ctree
parent2fbfd6efcca95469246338d4eeba69f31f4224dfcommit | diff
icmpv4: improve dest unreachable logic

When a ICMPv4 destination unreachable packet contains an embedded packet
this packet is parsed. When it's found to be invalid, the whole ICMP
packet is tagged as invalid.

In some cases the unreachable packet would still be used.

This patch fixes this by checking the packet is invalid flag as well
in the ICMPV4_DEST_UNREACH_IS_VALID macro.
src/decode-icmpv4.h diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git