]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
detect: set HTTP SWF decompress limits
authorVictor Julien <victor@inliniac.net>
Thu, 25 Feb 2021 21:38:34 +0000 (22:38 +0100)
committerVictor Julien <victor@inliniac.net>
Mon, 1 Mar 2021 07:24:52 +0000 (08:24 +0100)
(cherry picked from commit af13d4de180515f92813befc9bca06b66f7233bb)

suricata.yaml.in

index ac6b5341f52b5345c47062846b23388e7bba3df3..728d3e340f8e239bd655f2b13983f35f9eda81d8 100644 (file)
@@ -872,8 +872,8 @@ app-layer:
            swf-decompression:
              enabled: yes
              type: both
-             compress-depth: 0
-             decompress-depth: 0
+             compress-depth: 100kb
+             decompress-depth: 100kb
 
            # Use a random value for inspection sizes around the specified value.
            # This lowers the risk of some evasion techniques but could lead