]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
frames: fix bounds check
authorVictor Julien <vjulien@oisf.net>
Mon, 3 Jun 2024 08:28:44 +0000 (10:28 +0200)
committerVictor Julien <victor@inliniac.net>
Tue, 4 Jun 2024 20:05:25 +0000 (22:05 +0200)
src/app-layer-frames.c

index 0aa0e19b82acb047d40ea97a35b7fd7ef4fa223a..b8554f59a9822dfafda2d2bd3b878016c21133fe 100644 (file)
@@ -427,7 +427,7 @@ Frame *AppLayerFrameNewByPointer(Flow *f, const StreamSlice *stream_slice,
     if (f->proto == IPPROTO_TCP && f->protoctx == NULL)
         return NULL;
     if (frame_start < stream_slice->input ||
-            frame_start >= stream_slice->input + stream_slice->input_len)
+            frame_start > stream_slice->input + stream_slice->input_len)
         return NULL;
 #endif
     BUG_ON(frame_start < stream_slice->input);