]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
respond/reject: fix IPv6 TCP resets 8830/head
authorVictor Julien <vjulien@oisf.net>
Thu, 4 May 2023 04:47:58 +0000 (06:47 +0200)
committerVictor Julien <vjulien@oisf.net>
Sat, 6 May 2023 18:36:40 +0000 (20:36 +0200)
Fix length and next header field settings.

Bug: #6038.
(cherry picked from commit 235ee362119b4351e2e0cc3be9bbb5cf90bd20d9)

src/respond-reject-libnet11.c

index 5149d5eec07129aba7a8c8faa690a1d441d6dc97..76d825b2f84aafe62372a4384d48692b7beff20d 100644 (file)
@@ -431,7 +431,7 @@ int RejectSendLibnet11IPv6TCP(ThreadVars *tv, Packet *p, void *data, enum Reject
     if (c == NULL)
         return 1;
 
-    lpacket.len = LIBNET_IPV6_H + LIBNET_TCP_H;
+    lpacket.len = LIBNET_TCP_H;
     lpacket.dsize = p->payload_len;
 
     switch (dir) {
@@ -452,7 +452,7 @@ int RejectSendLibnet11IPv6TCP(ThreadVars *tv, Packet *p, void *data, enum Reject
 
     BuildTCP(c, &lpacket);
 
-    if (BuildIPv6(c, &lpacket, IPPROTO_ICMP) < 0)
+    if (BuildIPv6(c, &lpacket, IPPROTO_TCP) < 0)
         goto cleanup;
 
     if (t_inject_mode == LIBNET_LINK) {