Merge pull request #2161 in SNORT/snort3 from ~DERAMADA/snort3:h2i_discard_split_pref...

Squashed commit of the following:

commit f8545189f4980ad464cc7acbae782de0fe393c77
Author: deramada <deramada@cisco.com>
Date:   Tue Apr 14 10:54:50 2020 -0400

    http2_inspect: discard split connection preface

diff --git a/src/service_inspectors/http2_inspect/http2_stream_splitter_impl.cc b/src/service_inspectors/http2_inspect/http2_stream_splitter_impl.cc
index 1f8996eebbadea8d3da886d982b129a009a3c839..478e149fa66b6b7dbdf9adc1b887776d2f0d23d8 100644 (file)
--- a/src/service_inspectors/http2_inspect/http2_stream_splitter_impl.cc
+++ b/src/service_inspectors/http2_inspect/http2_stream_splitter_impl.cc
@@ -272,7 +272,10 @@ StreamSplitter::Status Http2StreamSplitter::implement_scan(Http2FlowData* sessio
             return StreamSplitter::ABORT;
         case V_TBD:
             session_data->scan_octets_seen[source_id] += length;
-            return StreamSplitter::SEARCH;
+            assert(session_data->scan_octets_seen[source_id] < 24);
+            *flush_offset = length;
+            session_data->payload_discard[source_id] = true;
+            return StreamSplitter::FLUSH;
         }
     }
     else