Project

General

Profile

Actions
Copy link

Bug #4953

closed

stream: too aggressive pruning in lossy streams

Added by Victor Julien over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
7.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

Pruning of StreamBufferBlocks could remove blocks that fell entirely after the target offset due to a logic error. This could lead to data being evicted that was still meant to be processed in the app-layer parsers.

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #4954: stream: too aggressive pruning in lossy streamsClosedShivani BhardwajActions
Copied to Suricata - Bug #4955: stream: too aggressive pruning in lossy streamsClosedJeff LucovskyActions
Actions
Copy link

Also available in: Atom PDF