Project

General

Profile

Actions

Bug #5059

closed

MQTT can return AppLayerResult::incomplete forever and buffer forever

Added by Jeff Lucovsky 8 months ago. Updated 5 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Cf https://github.com/OISF/suricata/pull/6851#discussion_r791479237

if parse_connect returns Err::Incomplete (for example because, there is not enough bytes for the properties), we will keep buffering forever because we have the full message with its length already cf let rem = &fullrem[..len];


Related issues 1 (0 open1 closed)

Copied from Bug #5018: MQTT can return AppLayerResult::incomplete forever and buffer foreverClosedSascha SteinbissActions
Actions #1

Updated by Jeff Lucovsky 8 months ago

  • Copied from Bug #5018: MQTT can return AppLayerResult::incomplete forever and buffer forever added
Actions #2

Updated by Shivani Bhardwaj 5 months ago

  • Assignee changed from Shivani Bhardwaj to Jason Ish
Actions #3

Updated by Shivani Bhardwaj 5 months ago

  • Status changed from Assigned to Closed
Actions

Also available in: Atom PDF