rdp: fix incomplete result

Aggregating the consumed bytes

diff --git a/rust/src/rdp/rdp.rs b/rust/src/rdp/rdp.rs
index 4a2c034dda5fb5bb3284bab4c7cb2723e2b2bb43..fac136b6e3e51169ec7f590243113bc1ee315915 100644 (file)
--- a/rust/src/rdp/rdp.rs
+++ b/rust/src/rdp/rdp.rs
@@ -245,7 +245,14 @@ impl RdpState {
                     Err(nom::Err::Failure(_)) | Err(nom::Err::Error(_)) => {
                         if probe_tls_handshake(available) {
                             self.tls_parsing = true;
-                            return self.parse_ts(available);
+                            let r = self.parse_ts(available);
+                            if r.status == 1 {
+                                //adds bytes already consumed to incomplete result
+                                let consumed = (input.len() - available.len()) as u32;
+                                return AppLayerResult::incomplete(r.consumed + consumed, r.needed);
+                            } else {
+                                return r;
+                            }
                         } else {
                             return AppLayerResult::err();
                         }