From cc50908f8d8beabaae3a60ee72412d704a024c2d Mon Sep 17 00:00:00 2001
From: Wesley van der Ree <wesley.vanderree@fox-it.com>
Date: Thu, 21 Mar 2019 14:48:18 +0100
Subject: [PATCH] smb: fix NT create filename parsing

parse_smb_create_andx_request_record skipped 1 byte too much before
the filename.

Fixes: #2894
---
 rust/src/smb/smb1_records.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rust/src/smb/smb1_records.rs b/rust/src/smb/smb1_records.rs
index 15f45e6943..bd1e6d8c45 100644
--- a/rust/src/smb/smb1_records.rs
+++ b/rust/src/smb/smb1_records.rs
@@ -543,7 +543,7 @@ named!(pub parse_smb_create_andx_request_record<SmbRequestCreateAndXRecord>,
        >> _skip3: take!(28)
        >> disposition: le_u32
        >> create_options: le_u32
-       >> _skip2: take!(8)
+       >> _skip2: take!(7)
        >> file_name: take!(file_name_len)
        >> _skip3: rest
        >> (SmbRequestCreateAndXRecord {
-- 
2.47.2