From: Victor Julien <victor@inliniac.net>
Date: Thu, 25 Feb 2021 21:38:34 +0000 (+0100)
Subject: detect: set HTTP SWF decompress limits
X-Git-Tag: suricata-6.0.2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6fb346ee00b4033b16bc0a95108952d5bf781884;p=thirdparty%2Fsuricata.git

detect: set HTTP SWF decompress limits

(cherry picked from commit af13d4de180515f92813befc9bca06b66f7233bb)
---

diff --git a/suricata.yaml.in b/suricata.yaml.in
index ac6b5341f5..728d3e340f 100644
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -872,8 +872,8 @@ app-layer:
            swf-decompression:
              enabled: yes
              type: both
-             compress-depth: 0
-             decompress-depth: 0
+             compress-depth: 100kb
+             decompress-depth: 100kb
 
            # Use a random value for inspection sizes around the specified value.
            # This lowers the risk of some evasion techniques but could lead