From: Victor Julien <victor@inliniac.net>
Date: Thu, 25 Feb 2021 21:38:34 +0000 (+0100)
Subject: detect: set HTTP SWF decompress limits
X-Git-Tag: suricata-7.0.0-beta1~1761
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=af13d4de180515f92813befc9bca06b66f7233bb;p=thirdparty%2Fsuricata.git

detect: set HTTP SWF decompress limits
---

diff --git a/suricata.yaml.in b/suricata.yaml.in
index 8534f7ee9d..c1e6c207f5 100644
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -872,8 +872,8 @@ app-layer:
            swf-decompression:
              enabled: yes
              type: both
-             compress-depth: 0
-             decompress-depth: 0
+             compress-depth: 100kb
+             decompress-depth: 100kb
 
            # Use a random value for inspection sizes around the specified value.
            # This lowers the risk of some evasion techniques but could lead