]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
respond/reject: fix IPv6 TCP resets
authorVictor Julien <vjulien@oisf.net>
Thu, 4 May 2023 04:47:58 +0000 (06:47 +0200)
committerVictor Julien <vjulien@oisf.net>
Fri, 5 May 2023 08:20:37 +0000 (10:20 +0200)
Fix length and next header field settings.

Bug: #6038.

src/respond-reject-libnet11.c

index b9c55583b334e24492e02876b0b6a5419c8420e1..95ff114484db20032ad694c40fe1e9345c7265ba 100644 (file)
@@ -432,7 +432,7 @@ int RejectSendLibnet11IPv6TCP(ThreadVars *tv, Packet *p, void *data, enum Reject
     if (c == NULL)
         return 1;
 
-    lpacket.len = LIBNET_IPV6_H + LIBNET_TCP_H;
+    lpacket.len = LIBNET_TCP_H;
     lpacket.dsize = p->payload_len;
 
     switch (dir) {
@@ -453,7 +453,7 @@ int RejectSendLibnet11IPv6TCP(ThreadVars *tv, Packet *p, void *data, enum Reject
 
     BuildTCP(c, &lpacket);
 
-    if (BuildIPv6(c, &lpacket, IPPROTO_ICMP) < 0)
+    if (BuildIPv6(c, &lpacket, IPPROTO_TCP) < 0)
         goto cleanup;
 
     if (t_inject_mode == LIBNET_LINK) {