Suricata

This prevents detection of Golang net/dns CVE-2024-24788

I expect the response to be logged except for the corrupt additional records, and I expect to have an event on it.

A fix would be that dns_parse_body does not completely error on
let (i, additionals) = dns_parse_answer(i, message, header.additional_rr as usize)?;
But rather return an empty Vec, and have DNSMessage struct have another field like bool corrupt_additional, where the caller could set an event as done for z_flag