Project

General

Profile

Actions
Copy link

Bug #626

closed

byte_jump with from_beginning option jumps too far

Added by Victor Julien over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
1.3.4
Affected Versions:
Effort:
Difficulty:
Label:

Description

When using the from_beginning option byte_jump should jump from the start of the payload and it should not include the number of bytes to read the jump size in it's jump.

Depending on the rule this can lead to both FP and/or FN.

Will Metcalf reported this issue.

Subtasks 1 (0 open — 1 closed)

Bug #627: byte_jump with from_beginning option jumps too far (1.4.x)ClosedVictor Julien11/13/2012Actions
Actions
Copy link

Also available in: Atom PDF