]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
stream/tcp: don't accept pass-packet policy
authorJuliana Fajardini <jufajardini@oisf.net>
Tue, 30 May 2023 13:43:49 +0000 (10:43 -0300)
committerVictor Julien <vjulien@oisf.net>
Tue, 13 Jun 2023 07:20:05 +0000 (09:20 +0200)
This is no longer valid for midstream exception policies.

Part of
Bug #5825

src/stream-tcp.c

index 0f1c2df5342daeb3bce623ada2f7a69b2ea8dbac..99dcd299530c99c20f546af0fc5e3c0d8869fd52 100644 (file)
@@ -963,8 +963,7 @@ static int StreamTcpPacketStateNone(
             return -1;
         }
         if (!(stream_config.midstream_policy == EXCEPTION_POLICY_NOT_SET ||
-                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_FLOW ||
-                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_PACKET)) {
+                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_FLOW)) {
             StreamTcpSetEvent(p, STREAM_FIN_BUT_NO_SESSION);
             SCLogDebug("FIN packet received, no session setup");
             return -1;
@@ -1059,8 +1058,7 @@ static int StreamTcpPacketStateNone(
             return 0;
         }
         if (!(stream_config.midstream_policy == EXCEPTION_POLICY_NOT_SET ||
-                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_FLOW ||
-                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_PACKET)) {
+                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_FLOW)) {
             SCLogDebug("Midstream policy not permissive, so won't pick up a session");
             return 0;
         }
@@ -1232,8 +1230,7 @@ static int StreamTcpPacketStateNone(
             return 0;
         }
         if (!(stream_config.midstream_policy == EXCEPTION_POLICY_NOT_SET ||
-                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_FLOW ||
-                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_PACKET)) {
+                    stream_config.midstream_policy == EXCEPTION_POLICY_PASS_FLOW)) {
             SCLogDebug("Midstream policy not permissive, so won't pick up a session");
             return 0;
         }