]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
stream: check debug check for multi-SYN/ACK in TFO
authorVictor Julien <vjulien@oisf.net>
Tue, 18 Apr 2023 11:48:46 +0000 (13:48 +0200)
committerVictor Julien <vjulien@oisf.net>
Thu, 20 Apr 2023 17:04:26 +0000 (19:04 +0200)
src/stream-tcp.c

index 4927d9201115d9cc1b72265d4f614438455a2337..cc516c2a1bd69ddf54a064b718ab562516b17df0 100644 (file)
@@ -1624,7 +1624,10 @@ static void TcpStateQueueInitFromPktSynAck(const Packet *p, TcpStateQueue *q)
 {
 #if defined(DEBUG_VALIDATION) || defined(DEBUG)
     const TcpSession *ssn = p->flow->protoctx;
-    BUG_ON(ssn->state != TCP_SYN_SENT);
+    if ((ssn->flags & STREAMTCP_FLAG_TCP_FAST_OPEN) == 0)
+        BUG_ON(ssn->state != TCP_SYN_SENT);
+    else
+        BUG_ON(ssn->state != TCP_ESTABLISHED);
 #endif
     memset(q, 0, sizeof(*q));