Project

General

Profile

Actions
Copy link

Bug #7224

closed

output/alert: assertion failed p->flow != NULL (7.0.x backport)

Added by Jeff Lucovsky 4 months ago. Updated 3 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67505

Introduced recently by commit 43858f70ad26fe17e2399e3a12c4ee6168f68af1

Reproducer is simply rule
alert ip any any -> any any (msg:"Flowbit set"; sid:1;)

with pcap attached

Should the assert simply get removed ?

Files

fuzz.pcap (385 Bytes) fuzz.pcap Philippe Antoine, 03/19/2024 09:05 PM

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #6875: output/alert: assertion failed p->flow != NULLClosedVictor JulienActions
Actions
Copy link
 #1

Updated by Jeff Lucovsky 4 months ago

  • Copied from Bug #6875: output/alert: assertion failed p->flow != NULL added
Actions
Copy link
 #2

Updated by Jeff Lucovsky 4 months ago

  • Status changed from New to In Review
Actions
Copy link
 #3

Updated by Victor Julien 3 months ago

  • Status changed from In Review to Rejected
  • Assignee deleted (Jeff Lucovsky)
  • Target version deleted (7.0.7)

I don't see this assert in 7.0.x.

Actions
Copy link

Also available in: Atom PDF