]> git.ipfire.org Git - thirdparty/suricata.git/commit
ldap: truly enforce max-tx 12358/head
authorPhilippe Antoine <pantoine@oisf.net>
Tue, 17 Dec 2024 10:20:51 +0000 (11:20 +0100)
committerVictor Julien <victor@inliniac.net>
Wed, 8 Jan 2025 16:06:14 +0000 (17:06 +0100)
commit494d7bfe99d6db60a740600e5cb4245c113f841a
tree9ec19c04b821618add88d28e8274fa2c5e33bb8b
parent3b76c78cb9c8f8ba1583b78d2de38a590cb5dae1
ldap: truly enforce max-tx

Ticket: 7465

If a bug chunk of data is parsed in one go, we could create many
transactions even if marking them as complete, and have
quadratic complexity calling find_request.

Proposed solution is to fail on creating a new transaction if too
many already exist.
rust/src/ldap/ldap.rs