Project

General

Profile

Actions
Copy link

Bug #2119

closed

3.2.x - defrag - overlap issue in linux policy

Added by Jason Ish almost 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
3.2.2
Affected Versions:
Effort:
Difficulty:
Label:

Description

When two fragment overlap one another, suricata seems to privilege data from the fragment with the lower offset, when the linux convention seems to keep the first (in time) data received.

This appears to be an edge case not handled by the existing unit tests.

Reported by Jérémy Beaume.

Actions
Copy link
 #1

Updated by Victor Julien almost 7 years ago

  • Status changed from Assigned to Closed
Actions
Copy link

Also available in: Atom PDF