Merge pull request #1831 in SNORT/snort3 from ~SATHIRKA/snort3:dns_compression_ptr...

Squashed commit of the following:

commit 575eea2d85c85fa31aa73ff86d77c3ce85bd54ea
Author: Sreeja Athirkandathil Narayanan <sathirka@cisco.com>
Date:   Thu Oct 31 17:53:36 2019 -0400

    appid: Handle DNS responses with compression pointers at last record

diff --git a/src/network_inspectors/appid/detector_plugins/detector_dns.cc b/src/network_inspectors/appid/detector_plugins/detector_dns.cc
index f73a26c5d127cb398f4269969b437d28150c91de..7d59e8826e870de344b20ded8541f74fa97f6dc1 100644 (file)
--- a/src/network_inspectors/appid/detector_plugins/detector_dns.cc
+++ b/src/network_inspectors/appid/detector_plugins/detector_dns.cc
@@ -338,7 +338,7 @@ APPID_STATUS_CODE DnsValidator::dns_validate_label(const uint8_t* data, uint16_t
             len_valid = false;
             lbl_ptr = (const DNSLabelPtr*)lbl;
             offset += offsetof(DNSLabelPtr, data);
-            if (offset >= size)
+            if (offset > size)
                 return APPID_NOMATCH;
             tmp = (uint16_t)(ntohs(lbl_ptr->position) & 0x3FFF);
             if (tmp > size - offsetof(DNSLabel, name))