From: Juliana Fajardini Date: Fri, 7 Feb 2025 21:40:08 +0000 (-0300) Subject: pgsql: don't fail if proto parses unknown message X-Git-Tag: suricata-8.0.0-beta1~411 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4fed424d746e6c7c06b853f86408b980a5c55ae0;p=thirdparty%2Fsuricata.git pgsql: don't fail if proto parses unknown message Even if unknown, if the message is properly parsed, allow the parser to proceed. Related to Bug #5524 --- diff --git a/rust/src/pgsql/pgsql.rs b/rust/src/pgsql/pgsql.rs index db57fe1e09..e9356ad456 100644 --- a/rust/src/pgsql/pgsql.rs +++ b/rust/src/pgsql/pgsql.rs @@ -632,10 +632,7 @@ unsafe extern "C" fn probing_parser_ts( let slice: &[u8] = build_slice!(input, input_len as usize); match parser::parse_request(slice) { - Ok((_, request)) => { - if let PgsqlFEMessage::UnknownMessageType(_) = request { - return ALPROTO_FAILED; - } + Ok((_, _)) => { return ALPROTO_PGSQL; } Err(Err::Incomplete(_)) => { @@ -661,10 +658,7 @@ unsafe extern "C" fn probing_parser_tc( } match parser::pgsql_parse_response(slice) { - Ok((_, response)) => { - if let PgsqlBEMessage::UnknownMessageType(_) = response { - return ALPROTO_FAILED; - } + Ok((_, _)) => { return ALPROTO_PGSQL; } Err(Err::Incomplete(_)) => {