From: Eric Leblond <eric@regit.org>
Date: Thu, 20 Jul 2017 08:19:01 +0000 (+0200)
Subject: app-layer-ssh: trigger bypass when done
X-Git-Tag: suricata-4.0.0~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2979a0a2e1198be101408fbc88e64ea46cd3d002;p=thirdparty%2Fsuricata.git

app-layer-ssh: trigger bypass when done

Trigger bypass when application layer will not inspect anymore.
---

diff --git a/src/app-layer-ssh.c b/src/app-layer-ssh.c
index 7629776903..91aa9c59b6 100644
--- a/src/app-layer-ssh.c
+++ b/src/app-layer-ssh.c
@@ -434,6 +434,7 @@ static int SSHParseRequest(Flow *f, void *state, AppLayerParserState *pstate,
         ssh_state->srv_hdr.flags & SSH_FLAG_PARSER_DONE) {
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_INSPECTION);
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_REASSEMBLY);
+        AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_BYPASS_READY);
     }
 
     SCReturnInt(r);
@@ -458,6 +459,7 @@ static int SSHParseResponse(Flow *f, void *state, AppLayerParserState *pstate,
         ssh_state->srv_hdr.flags & SSH_FLAG_PARSER_DONE) {
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_INSPECTION);
         AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_NO_REASSEMBLY);
+        AppLayerParserStateSetFlag(pstate, APP_LAYER_PARSER_BYPASS_READY);
     }
 
     SCReturnInt(r);