Suricata

Multiple issues :

            ssl_state->curr_connp->hs_buffer_offset += add;

            if (ssl_state->curr_connp->hs_buffer_message_size <=
                    ssl_state->curr_connp->hs_buffer_offset + input_len) {

The check should remove + input_len (because it was already added to hs_buffer_offset just before

TLSDecodeHandshakeHello(ssl_state, input, ssl_state->curr_connp->message_length);

We should use input_len

https://github.com/OISF/suricata/pull/8146