Adds test about tcp protocol detection bailout

diff --git a/tests/tcp-protodetect-bailout/README.md b/tests/tcp-protodetect-bailout/README.md
new file mode 100644 (file)
index 0000000..bbc49fd
--- /dev/null
+++ b/tests/tcp-protodetect-bailout/README.md
@@ -0,0 +1,13 @@
+# Description
+
+Test absence of impossible case in `TCPProtoDetectCheckBailConditions`
+
+# PCAP
+
+The pcap comes from https://redmine.openinfosecfoundation.org/issues/4171
+
+This pcap was produced with
+1. python script from http-connect S-V test
+2. Mixed packets order with editcap and mergecap (1-6,10,9,7-8)
+3. Manually crafted to increase the TCP option window scale to 7 (128) on both sides
+4. Manually crafted to increase the sequence number of now packet 7 (second packet with tcp payload) adding 0x100000 (as much needed to trigger `DEBUG_VALIDATE_BUG_ON(size_ts > 1000000UL);`)

diff --git a/tests/tcp-protodetect-bailout/input.pcap b/tests/tcp-protodetect-bailout/input.pcap
new file mode 100644 (file)
index 0000000..9bb197b
Binary files /dev/null and b/tests/tcp-protodetect-bailout/input.pcap differ

diff --git a/tests/tcp-protodetect-bailout/test.yaml b/tests/tcp-protodetect-bailout/test.yaml
new file mode 100644 (file)
index 0000000..9d15ab8
--- /dev/null
+++ b/tests/tcp-protodetect-bailout/test.yaml
@@ -0,0 +1,10 @@
+# disables checksum verification
+args:
+- -k none
+- --set stream.reassembly.depth=0
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: flow