From: Victor Julien <vjulien@oisf.net>
Date: Mon, 3 Jun 2024 08:28:44 +0000 (+0200)
Subject: frames: fix bounds check
X-Git-Tag: suricata-8.0.0-beta1~1206
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c7402d2d015a5d24e23879a0c863b949f4cb0ff9;p=thirdparty%2Fsuricata.git

frames: fix bounds check
---

diff --git a/src/app-layer-frames.c b/src/app-layer-frames.c
index 0aa0e19b82..b8554f59a9 100644
--- a/src/app-layer-frames.c
+++ b/src/app-layer-frames.c
@@ -427,7 +427,7 @@ Frame *AppLayerFrameNewByPointer(Flow *f, const StreamSlice *stream_slice,
     if (f->proto == IPPROTO_TCP && f->protoctx == NULL)
         return NULL;
     if (frame_start < stream_slice->input ||
-            frame_start >= stream_slice->input + stream_slice->input_len)
+            frame_start > stream_slice->input + stream_slice->input_len)
         return NULL;
 #endif
     BUG_ON(frame_start < stream_slice->input);