range: checks that end is after start

Otherwise, we end up allocating too much memory

diff --git a/src/app-layer-htp-file.c b/src/app-layer-htp-file.c
index e73bdb524bb30939813c31fe544e619597758c3f..bde98dd0f0f9fff2b3f8fbf293c705ce48dc9392 100644 (file)
--- a/src/app-layer-htp-file.c
+++ b/src/app-layer-htp-file.c
@@ -196,6 +196,11 @@ static int HTPParseAndCheckContentRange(
     } else if (range->end == range->size - 1 && range->start == 0) {
         SCLogDebug("range without all information");
         return -3;
+    } else if (range->start > range->end) {
+        AppLayerDecoderEventsSetEventRaw(&htud->decoder_events, HTTP_DECODER_EVENT_RANGE_INVALID);
+        s->events++;
+        SCLogDebug("invalid range");
+        return -4;
     }
     return r;
 }