From: Victor Julien <vjulien@oisf.net>
Date: Mon, 5 Sep 2022 17:28:27 +0000 (+0200)
Subject: decode/tcp: allow 4 byte TFO with 2 byte cookie
X-Git-Tag: suricata-6.0.7~20
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a383f29aa2656691c2848d156ba04b8d38dfaa9d;p=thirdparty%2Fsuricata.git

decode/tcp: allow 4 byte TFO with 2 byte cookie

(cherry picked from commit f5bd55dac863c4c54d6a21942a7ef821f2b4fa4f)
---

diff --git a/src/decode-tcp.h b/src/decode-tcp.h
index 24c2a8e0bc..79e554204c 100644
--- a/src/decode-tcp.h
+++ b/src/decode-tcp.h
@@ -63,7 +63,7 @@
 #define TCP_OPT_MSS_LEN                      4
 #define TCP_OPT_SACK_MIN_LEN                 10 /* hdr 2, 1 pair 8 = 10 */
 #define TCP_OPT_SACK_MAX_LEN                 34 /* hdr 2, 4 pair 32= 34 */
-#define TCP_OPT_TFO_MIN_LEN                  6  /* kind, len, 6 */
+#define TCP_OPT_TFO_MIN_LEN                  4  /* kind, len, 2 bytes cookie: 4 */
 #define TCP_OPT_TFO_MAX_LEN                  18 /* kind, len, 18 */
 
 /** Max valid wscale value. */