From: Wesley van der Ree Date: Thu, 21 Mar 2019 13:48:18 +0000 (+0100) Subject: smb: fix NT create filename parsing X-Git-Tag: suricata-5.0.0-beta1~121 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cc50908f8d8beabaae3a60ee72412d704a024c2d;p=thirdparty%2Fsuricata.git smb: fix NT create filename parsing parse_smb_create_andx_request_record skipped 1 byte too much before the filename. Fixes: #2894 --- diff --git a/rust/src/smb/smb1_records.rs b/rust/src/smb/smb1_records.rs index 15f45e6943..bd1e6d8c45 100644 --- a/rust/src/smb/smb1_records.rs +++ b/rust/src/smb/smb1_records.rs @@ -543,7 +543,7 @@ named!(pub parse_smb_create_andx_request_record, >> _skip3: take!(28) >> disposition: le_u32 >> create_options: le_u32 - >> _skip2: take!(8) + >> _skip2: take!(7) >> file_name: take!(file_name_len) >> _skip3: rest >> (SmbRequestCreateAndXRecord {