Merge pull request #2731 in SNORT/snort3 from ~ARMANDAV/snort3:napbug to master

Squashed commit of the following:

commit 4152a7d9d0d407bcd976cf00c344e3e653d69343
Author: Arun Mandava <armandav@cisco.com>
Date:   Mon Feb 1 13:26:24 2021 -0500

    stream: always use latest splitter from tracker after paf_check

diff --git a/src/stream/tcp/tcp_reassembler.cc b/src/stream/tcp/tcp_reassembler.cc
index bf31e35606ce7f71cc05ec7a2604f8bb0c863810..91118c9b3555acd9d11e3a82e2e589b1f3512636 100644 (file)
--- a/src/stream/tcp/tcp_reassembler.cc
+++ b/src/stream/tcp/tcp_reassembler.cc
@@ -955,6 +955,8 @@ int32_t TcpReassembler::scan_data_post_ack(TcpReassemblerState& trs, uint32_t* f
         int32_t flush_pt = paf_check(splitter, &trs.paf_state, p, tsn->payload(),
             flush_len, total, tsn->c_seq, flags);
 
+        // Get splitter from tracker as paf check may change it.
+        splitter = trs.tracker->get_splitter();
         trs.sos.seglist.cur_sseg = tsn;
 
         if ( flush_pt >= 0 )