Project

General

Profile

Actions
Copy link

Bug #5912

closed
VJ SS

rfb: parser returns error on unimplemented record types

Bug #5912: rfb: parser returns error on unimplemented record types

Added by Victor Julien about 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Sascha Steinbiss
Target version:
7.0.0
Affected Versions:
Effort:
Difficulty:
Label:

Description

Parser goes into error state on unimplemented record types. With app-layer.error-policy: drop-flow (default for IPS) this will lead to connections getting dropped.

Related issues 2 (1 open — 1 closed)

Related to Suricata - Feature #5913: rfb: add more record typesNewCommunity TicketActions
Related to Suricata - Bug #5915: rfb: parser returns error on unimplemented record types (6.0.x backport)ClosedSascha SteinbissActions

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #1

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #2

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Sascha Steinbiss
  • Target version changed from TBD to 7.0.0
  • Label Needs backport to 6.0 added

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #3

A pcap that triggers an error condition can be found in https://github.com/OISF/suricata-verify/pull/1117

OT Updated by OISF Ticketbot about 3 years ago Actions
Copy link
 #4

  • Subtask #5915 added

OT Updated by OISF Ticketbot about 3 years ago Actions
Copy link
 #5

  • Label deleted (Needs backport to 6.0)

PA Updated by Philippe Antoine almost 3 years ago Actions
Copy link
 #7

  • Status changed from Assigned to In Review

PA Updated by Philippe Antoine almost 3 years ago Actions
Copy link
 #8

  • Status changed from In Review to Resolved

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #9

  • Subtask deleted (#5915)

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #10

  • Related to Bug #5915: rfb: parser returns error on unimplemented record types (6.0.x backport) added

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #11

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom