From: Philippe Antoine <contact@catenacyber.fr>
Date: Wed, 22 Jul 2020 19:51:40 +0000 (+0200)
Subject: dcerpc: adds invalid signature unit test
X-Git-Tag: suricata-6.0.0-beta1~109
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0c92b8f7e47e6b19ba0ab4a93c2dc08e1e8fc5d8;p=thirdparty%2Fsuricata.git

dcerpc: adds invalid signature unit test
---

diff --git a/src/detect-dce-stub-data.c b/src/detect-dce-stub-data.c
index a4145452f9..0339cc66c9 100644
--- a/src/detect-dce-stub-data.c
+++ b/src/detect-dce-stub-data.c
@@ -1902,6 +1902,19 @@ static int DetectDceStubDataTestParse05(void)
     return result;
 }
 
+// invalid signature because of invalid protocol
+static int DetectDceStubDataTestParse06(void)
+{
+    DetectEngineCtx *de_ctx = DetectEngineCtxInit();
+    FAIL_IF_NULL(de_ctx);
+    de_ctx->flags = DE_QUIET;
+    Signature *s = DetectEngineAppendSig(de_ctx,
+            "alert dns any any -> any any dce_stub_data;content:\"0\";");
+    FAIL_IF_NOT_NULL(s);
+    DetectEngineCtxFree(de_ctx);
+    PASS;
+}
+
 static void DetectDceStubDataRegisterTests(void)
 {
     UtRegisterTest("DetectDceStubDataTestParse01",
@@ -1914,5 +1927,7 @@ static void DetectDceStubDataRegisterTests(void)
                    DetectDceStubDataTestParse04);
     UtRegisterTest("DetectDceStubDataTestParse05",
                    DetectDceStubDataTestParse05);
+    UtRegisterTest("DetectDceStubDataTestParse06",
+                   DetectDceStubDataTestParse06);
 }
 #endif