Project

General

Profile

Actions

Bug #5912

closed

rfb: parser returns error on unimplemented record types

Added by Victor Julien about 1 year ago. Updated 10 months ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Parser goes into error state on unimplemented record types. With app-layer.error-policy: drop-flow (default for IPS) this will lead to connections getting dropped.


Related issues 2 (1 open1 closed)

Related to Suricata - Feature #5913: rfb: add more record typesNewCommunity TicketActions
Related to Suricata - Bug #5915: rfb: parser returns error on unimplemented record types (6.0.x backport)ClosedSascha SteinbissActions
Actions #1

Updated by Victor Julien about 1 year ago

Actions #2

Updated by Victor Julien about 1 year ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Sascha Steinbiss
  • Target version changed from TBD to 7.0.0
  • Label Needs backport to 6.0 added
Actions #3

Updated by Victor Julien about 1 year ago

A pcap that triggers an error condition can be found in https://github.com/OISF/suricata-verify/pull/1117

Actions #4

Updated by OISF Ticketbot about 1 year ago

  • Subtask #5915 added
Actions #5

Updated by OISF Ticketbot about 1 year ago

  • Label deleted (Needs backport to 6.0)
Actions #7

Updated by Philippe Antoine 10 months ago

  • Status changed from Assigned to In Review
Actions #8

Updated by Philippe Antoine 10 months ago

  • Status changed from In Review to Resolved
Actions #9

Updated by Victor Julien 10 months ago

  • Subtask deleted (#5915)
Actions #10

Updated by Victor Julien 10 months ago

  • Related to Bug #5915: rfb: parser returns error on unimplemented record types (6.0.x backport) added
Actions #11

Updated by Victor Julien 10 months ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF