]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 418ddba) | patch
stream: improve FIN checking 8675/head
authorVictor Julien <vjulien@oisf.net>
Mon, 3 Apr 2023 09:50:09 +0000 (11:50 +0200)
committerVictor Julien <vjulien@oisf.net>
Mon, 3 Apr 2023 09:51:22 +0000 (11:51 +0200)
commit39a6f411e9748e76211b76b1f45b6c1863012972
tree1d31b6973832263932f5bdd4d518638ba0b96a99tree
parent418ddba38e008f0a57c07e7a872d0771d36a9bbdcommit | diff
stream: improve FIN checking

After recent next_seq changes, the FIN checks could be too strict
leading to stalling sessions in IPS mode.

This patch requires a FIN to be >= last ack and <= next_win to be
accepted.
src/stream-tcp.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git