Project

General

Profile

Actions
Copy link

Bug #5059

closed
JL JI

MQTT can return AppLayerResult::incomplete forever and buffer forever

Bug #5059: MQTT can return AppLayerResult::incomplete forever and buffer forever

Added by Jeff Lucovsky about 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
6.0.5
Affected Versions:
6.0.4
Effort:
Difficulty:
Label:

Description

Cf https://github.com/OISF/suricata/pull/6851#discussion_r791479237

if parse_connect returns Err::Incomplete (for example because, there is not enough bytes for the properties), we will keep buffering forever because we have the full message with its length already cf let rem = &fullrem[..len];

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #5018: MQTT can return AppLayerResult::incomplete forever and buffer foreverClosedSascha SteinbissActions

JL Updated by Jeff Lucovsky about 4 years ago Actions
Copy link
 #1

  • Copied from Bug #5018: MQTT can return AppLayerResult::incomplete forever and buffer forever added

SB Updated by Shivani Bhardwaj about 4 years ago Actions
Copy link
 #2

  • Assignee changed from Shivani Bhardwaj to Jason Ish

SB Updated by Shivani Bhardwaj about 4 years ago Actions
Copy link
 #3

  • Status changed from Assigned to Closed
Actions
Copy link

Also available in: PDF Atom