]> git.ipfire.org Git - thirdparty/suricata.git/commit
ipv6: check for MLD messages with HL not 1 1239/head
authorVictor Julien <victor@inliniac.net>
Thu, 20 Nov 2014 13:31:34 +0000 (14:31 +0100)
committerVictor Julien <victor@inliniac.net>
Fri, 5 Dec 2014 09:37:55 +0000 (10:37 +0100)
commit0bb2b15491995c66e2b600e5e71c70ffd0de1513
treecef4290eb7bb6adb9186ed5e7ecab1b4978d6288
parent68e6c4e94b8b7e5d61ea7062ff21d2678bedde32
ipv6: check for MLD messages with HL not 1

MLD messages should have a hop limit of 1 only. All others are invalid.

Written at MLD talk of Enno Rey, Antonios Atlasis & Jayson Salazar during
Deepsec 2014.
rules/decoder-events.rules
src/decode-events.h
src/decode-icmpv6.c
src/detect-engine-event.h