]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
dcerpc: adds invalid signature unit test
authorPhilippe Antoine <contact@catenacyber.fr>
Wed, 22 Jul 2020 19:51:40 +0000 (21:51 +0200)
committerVictor Julien <victor@inliniac.net>
Fri, 24 Jul 2020 11:04:42 +0000 (13:04 +0200)
src/detect-dce-stub-data.c

index a4145452f94788474a401b99b2660f595bfb2852..0339cc66c9259889b71134dfa4f3e8fd2c136eb7 100644 (file)
@@ -1902,6 +1902,19 @@ static int DetectDceStubDataTestParse05(void)
     return result;
 }
 
+// invalid signature because of invalid protocol
+static int DetectDceStubDataTestParse06(void)
+{
+    DetectEngineCtx *de_ctx = DetectEngineCtxInit();
+    FAIL_IF_NULL(de_ctx);
+    de_ctx->flags = DE_QUIET;
+    Signature *s = DetectEngineAppendSig(de_ctx,
+            "alert dns any any -> any any dce_stub_data;content:\"0\";");
+    FAIL_IF_NOT_NULL(s);
+    DetectEngineCtxFree(de_ctx);
+    PASS;
+}
+
 static void DetectDceStubDataRegisterTests(void)
 {
     UtRegisterTest("DetectDceStubDataTestParse01",
@@ -1914,5 +1927,7 @@ static void DetectDceStubDataRegisterTests(void)
                    DetectDceStubDataTestParse04);
     UtRegisterTest("DetectDceStubDataTestParse05",
                    DetectDceStubDataTestParse05);
+    UtRegisterTest("DetectDceStubDataTestParse06",
+                   DetectDceStubDataTestParse06);
 }
 #endif