Actions
Bug #5018
closedMQTT can return AppLayerResult::incomplete forever and buffer forever
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 6.0
Description
Cf https://github.com/OISF/suricata/pull/6851#discussion_r791479237
if parse_connect returns Err::Incomplete (for example because, there is not enough bytes for the properties), we will keep buffering forever because we have the full message with its length already cf let rem = &fullrem[..len];
Updated by Jeff Lucovsky almost 3 years ago
- Copied to Bug #5059: MQTT can return AppLayerResult::incomplete forever and buffer forever added
Updated by Sascha Steinbiss almost 3 years ago
Updated by Philippe Antoine over 2 years ago
- Status changed from New to In Review
Updated by Shivani Bhardwaj over 2 years ago
- Status changed from In Review to Closed
Closed by: https://github.com/OISF/suricata/pull/7223
Actions