Project

General

Profile

Actions

Bug #4508

closed

SSH bypass is not working

Added by Philippe Antoine almost 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
High
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

Since SSH parser is in rust.
This is because constants between Rust and C are not in sync.

In Rust we have APP_LAYER_PARSER_BYPASS_READY : u8 = 0b1000; that means 8
In C we have #define APP_LAYER_PARSER_BYPASS_READY BIT_U8(4) that means 16

There may be other implications


Related issues 3 (0 open3 closed)

Related to Suricata - Bug #4510: Incorrect flags in RustClosedShivani BhardwajActions
Has duplicate Suricata - Bug #4509: Incorrect flags in RustClosedShivani BhardwajActions
Copied to Suricata - Bug #4511: SSH bypass is not workingRejectedJeff LucovskyActions
Actions #1

Updated by Philippe Antoine almost 3 years ago

  • Status changed from New to In Review
Actions #2

Updated by Philippe Antoine almost 3 years ago

  • Label Needs backport to 5.0 added
Actions #3

Updated by Philippe Antoine almost 3 years ago

Affects also APP_LAYER_PARSER_EOF*

Actions #4

Updated by Shivani Bhardwaj almost 3 years ago

  • Has duplicate Bug #4509: Incorrect flags in Rust added
Actions #5

Updated by Shivani Bhardwaj almost 3 years ago

  • Copied to Bug #4511: SSH bypass is not working added
Actions #6

Updated by Shivani Bhardwaj almost 3 years ago

  • Related to Bug #4510: Incorrect flags in Rust added
Actions

Also available in: Atom PDF