Project

General

Profile

Actions

Bug #6585

closed

SCTIME_FROM_TIMESPEC() creates incorrect timestamps

Added by Stephen Donnelly 6 months ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
low
Difficulty:
low
Label:
Beginner, C

Description

The macro SCTIME_FROM_TIMESPEC(ts) converts nanoseconds to microseconds by multiplying by 1000, when it should divide by 1000.

This will produce garbage SCtime_t values in the microsecond part, which may affect flow tracking behaviour and reporting as it is used to set f->startts.


Subtasks 1 (0 open1 closed)

Bug #6595: SCTIME_FROM_TIMESPEC() creates incorrect timestamps (7.0.x backport)ClosedJeff LucovskyActions

Related issues 1 (0 open1 closed)

Related to Suricata - Bug #6584: SCTIME_ADD_SECS() macro zeros out ts.usec partClosedStephen DonnellyActions
Actions

Also available in: Atom PDF