]> git.ipfire.org Git - thirdparty/suricata.git/commit
ssh: avoid quadratic complexity from long banner
authorPhilippe Antoine <pantoine@oisf.net>
Thu, 22 Feb 2024 09:14:36 +0000 (10:14 +0100)
committerVictor Julien <vjulien@oisf.net>
Mon, 18 Mar 2024 20:12:43 +0000 (21:12 +0100)
commitf9ef96af30bc38d332c84a9f401e768d0b05e781
tree7f66842ae3bd68975267fc584c11db2c4e797325
parentd4acd0fb44a29b0d1e1744a9f2a00804f0a59d31
ssh: avoid quadratic complexity from long banner

Ticket: 6799

When we find an overlong banner, we get into the state just
waiting for end of line, and we just want to skip the bytes
until then.
Returning AppLayerResult::incomplete made TCP engine retain
the bytes and grow the buffer that we parsed again and again...

(cherry picked from commit 271ed2008bb7392ca2803ab6dac8952491616151)
rust/src/ssh/ssh.rs