]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 653e702) | patch
smb/ntlmssp: improve version check
authorVictor Julien <vjulien@oisf.net>
Tue, 25 Jun 2024 08:35:35 +0000 (10:35 +0200)
committerVictor Julien <victor@inliniac.net>
Wed, 3 Jul 2024 05:55:36 +0000 (07:55 +0200)
commitf59c43b1c7b8eada987d642cbc1645abefb3984c
tree66522cabbf4a250f9abb5179c35d3afd4a41c7e4tree
parent653e702aa70987f25892d29c0daa0559b601108fcommit | diff
smb/ntlmssp: improve version check

Don't assume the ntlmssp version field is always present if the flag is
set. Instead keep track of the offsets of the data of the various blobs
and see if there is space for the version.

Inspired by how Wireshark does the parsing.

Bug: #7121.
rust/src/smb/ntlmssp_records.rs diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git