Optimization #7430: dns: parse more than 255 name segments to find end of name - Suricata - Open Information Security Foundation

Actions

Copy link

Optimization #7430

open

dns: parse more than 255 name segments to find end of name

Added by Jason Ish 8 months ago. Updated 4 months ago.

Status:

Assigned

Priority:

Normal

Assignee:

Jason Ish

Target version:

9.0.0-beta1

Effort:

Difficulty:

Label:

Description

Currently if the DNS parser hits the 255 label limit with no pointer reached, and not end of name indicator, parsing will fail, as we don't yet know the end of the data. Per @Philippe Antoine we should just keep on parsing if not loop condition is hit - this will get us to the end of data.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Jason Ish 8 months ago

Blocked by Security #7280: dns: quadratic complexity in logging and invalid json as output added

Actions

Copy link

Updated by Jason Ish 8 months ago

Subject changed from dns: keep parsing pass current iteration limit if not pointer has been reached to dns: parse more than 255 name segments to find end of name

Actions

Copy link