From: Tom DeCanio <decanio.tom@gmail.com>
Date: Fri, 16 Sep 2016 12:24:50 +0000 (-0700)
Subject: util-decode-mime: remove quote from boundary= string.
X-Git-Tag: suricata-3.2beta1~339
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=04faf1a93a80248c6f58268428eb16797a0776e1;p=thirdparty%2Fsuricata.git

util-decode-mime: remove quote from boundary= string.

remove quote from the end of the boundary= string.  This was throwing off
the mime parser so that it wouldn't always catch mime boundaries causing
things like missed attachments.
---

diff --git a/src/util-decode-mime.c b/src/util-decode-mime.c
index 54902551fa..eb1dcab566 100644
--- a/src/util-decode-mime.c
+++ b/src/util-decode-mime.c
@@ -62,7 +62,7 @@
 #define CTNT_DISP_STR     "content-disposition"
 #define CTNT_TRAN_STR     "content-transfer-encoding"
 #define MSG_ID_STR        "message-id"
-#define BND_START_STR     "boundary=\""
+#define BND_START_STR     "boundary="
 #define TOK_END_STR       "\""
 #define MSG_STR           "message/"
 #define MULTIPART_STR     "multipart/"