From: Mats Klepsland <mats.klepsland@gmail.com>
Date: Fri, 19 Oct 2018 21:00:42 +0000 (+0200)
Subject: app-layer-ssl: fix JA3 bug in TLS extension decoding
X-Git-Tag: suricata-4.1.0~52
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fc53b2ecd5272a85aea029b65344b99846e042ff;p=thirdparty%2Fsuricata.git

app-layer-ssl: fix JA3 bug in TLS extension decoding
---

diff --git a/src/app-layer-ssl.c b/src/app-layer-ssl.c
index 6c823da8c0..d0c99b69b9 100644
--- a/src/app-layer-ssl.c
+++ b/src/app-layer-ssl.c
@@ -1197,6 +1197,7 @@ static inline int TLSDecodeHSHelloExtensions(SSLState *ssl_state,
             }
         }
 
+next:
         if ((ssl_state->current_flags & SSL_AL_FLAG_STATE_CLIENT_HELLO) &&
                 ssl_config.enable_ja3) {
             if (TLSDecodeValueIsGREASE(ext_type) != 1) {
@@ -1206,7 +1207,6 @@ static inline int TLSDecodeHSHelloExtensions(SSLState *ssl_state,
             }
         }
 
-next:
         processed_len += ext_len + 4;
     }