Project

General

Profile

Actions
Copy link

Bug #7546

closed
PA SB

dcerpc: parser does not take fraglen into account

Bug #7546: dcerpc: parser does not take fraglen into account

Added by Philippe Antoine about 1 year ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
8.0.0
Effort:
Difficulty:
low
Label:

Description

like &cur_i[parsed as usize..] should be &cur_i[parsed as usize..fraglen]

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #7254: dcerpc: parser does not support multiple PDUsClosedPhilippe AntoineActions

PA Updated by Philippe Antoine about 1 year ago Actions
Copy link
 #1

  • Copied from Bug #7254: dcerpc: parser does not support multiple PDUs added

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #2

What this the impact of this?

PA Updated by Philippe Antoine about 1 year ago Actions
Copy link
 #3

What this the impact of this?

I think it is that we accept some invalid input.

We also have #7254 which is a closely related, so not sure in the impact with or without #7254 fixed

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #4

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

SB Updated by Shivani Bhardwaj 11 months ago Actions
Copy link
 #5

  • Assignee changed from Shivani Bhardwaj to Philippe Antoine

as Philippe has already worked on this that I'll be using.

PA Updated by Philippe Antoine 10 months ago Actions
Copy link
 #6

@Shivani Bhardwaj do you want me to take on this and do a PR ? (same for #7547 )

SB Updated by Shivani Bhardwaj 10 months ago Actions
Copy link
 #7

@Philippe Antoine sure! I was anyway going to cherry-pick your work but a latest version would indeed be nice. Thanks a lot! :)

PA Updated by Philippe Antoine 10 months ago Actions
Copy link
 #8

  • Assignee changed from Philippe Antoine to Shivani Bhardwaj

Reassigning back to you as discussed, right Shivani ?

VJ Updated by Victor Julien 10 months ago Actions
Copy link
 #9

  • Target version changed from 8.0.0-rc1 to 9.0.0-beta1

PA Updated by Philippe Antoine 9 months ago Actions
Copy link
 #10

  • Affected Versions 8.0.0 added

SB Updated by Shivani Bhardwaj 3 months ago Actions
Copy link
 #11

  • Status changed from New to In Progress
  • Difficulty set to low

SB Updated by Shivani Bhardwaj 3 months ago Actions
Copy link
 #12

  • Status changed from In Progress to In Review

SB Updated by Shivani Bhardwaj about 2 months ago Actions
Copy link
 #13

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom