Bug #5285: frame: assertion failed in PrefilterMpmFrame - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5285

closed

frame: assertion failed in PrefilterMpmFrame

Added by Philippe Antoine over 2 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

7.0.0-beta1

Affected Versions:

Effort:

Difficulty:

Label:

Description

Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46773

Reproducer is with rules

alert http any any -> any any (flow:to_server; frame:http1.request; content:"GET / HTTP/1.1|0d 0a|Host: www.testmyids.com"; startswith; bsize:81; sid:1;)
alert http1 any any -> any any (flow:to_client; frame:response; content:"uid=0|28|root|29|"; sid:2;)
alert http1 any any -> any any (flow:to_server; frame:request; strip_whitespace; content:"GET/HTTP/1.1Host:www.testmyids.com"; startswith; bsize:66; sid:3;)

and attached pcap

Files

fuzz.pcap (1.08 KB) fuzz.pcap

Philippe Antoine, 04/25/2022 01:05 PM