]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
smb: fix NT create filename parsing
authorWesley van der Ree <wesley.vanderree@fox-it.com>
Thu, 21 Mar 2019 13:48:18 +0000 (14:48 +0100)
committerVictor Julien <victor@inliniac.net>
Fri, 22 Mar 2019 11:51:07 +0000 (12:51 +0100)
parse_smb_create_andx_request_record skipped 1 byte too much before
the filename.

Fixes: #2894
rust/src/smb/smb1_records.rs

index 15f45e69432285d290611838c53a11f7cf89330d..bd1e6d8c4544b2b29e3623507272b66a00672bef 100644 (file)
@@ -543,7 +543,7 @@ named!(pub parse_smb_create_andx_request_record<SmbRequestCreateAndXRecord>,
        >> _skip3: take!(28)
        >> disposition: le_u32
        >> create_options: le_u32
-       >> _skip2: take!(8)
+       >> _skip2: take!(7)
        >> file_name: take!(file_name_len)
        >> _skip3: rest
        >> (SmbRequestCreateAndXRecord {