]> git.ipfire.org Git - thirdparty/suricata.git/commit
dcerpc: accept ALTER_CONTEXT as a valid request 9304/head
authorShivani Bhardwaj <shivani@oisf.net>
Wed, 26 Jul 2023 09:41:59 +0000 (15:11 +0530)
committerVictor Julien <vjulien@oisf.net>
Sat, 29 Jul 2023 06:00:13 +0000 (08:00 +0200)
commit9e2fb158ab33bdb9d65c4450606133de98111d55
tree31b2f1e0a79237f96250074e9079da59710c8f6b
parentbbfc445b4aa6f20a9dc423c08fea2ae3dbf0b854
dcerpc: accept ALTER_CONTEXT as a valid request

So far, if only the starting request was a DCERPC request, it would be
considered DCERPC traffic. Since ALTER_CONTEXT is a valid request type,
it should be accepted too.

Reported and patch proposed in the following Redmine ticket by
InterNALXz.

Bug 6191

(cherry picked from commit 8770431986598f195d57e570287c40ee3dec0cfa)
rust/src/dcerpc/dcerpc.rs