Project

General

Profile

Actions
Copy link

Bug #8763

closed
PA PA

frame: assertion triggered DEBUG_VALIDATE_BUG_ON(fsd->frame->len > 0 && (int64_t)data_len > fsd->frame->len);

Bug #8763: frame: assertion triggered DEBUG_VALIDATE_BUG_ON(fsd->frame->len > 0 && (int64_t)data_len > fsd->frame->len);

Added by Philippe Antoine about 1 month ago. Updated about 1 hour ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Files

frame.pcap (389 Bytes) frame.pcap Philippe Antoine, 07/23/2026 03:35 PM

Subtasks 1 (0 open — 1 closed)

Bug #8912: frame: assertion triggered DEBUG_VALIDATE_BUG_ON(fsd->frame->len > 0 && (int64_t)data_len > fsd->frame->len); (8.0.x backport)ClosedPhilippe AntoineActions

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #1

Not sure it is a security issue, but investigating first here

Reproducer is with rules

alert ip any any -> any any (frame:http1.response; to_md5;pcre://;sid:3;)

suricata -c fuzz.yaml -S fuzz.rules -r frame.pcap

finds
fsd->frame->len=5 data_len=10

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #2

With to+sha1 instead of to+md5 I have 14 instead of 10

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #3

  • Status changed from New to In Review

Gitlab MR, I think this can be made public

JI Updated by Jason Ish 6 days ago Actions
Copy link
 #4

  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot 6 days ago Actions
Copy link
 #5

  • Subtask #8912 added

OT Updated by OISF Ticketbot 6 days ago Actions
Copy link
 #6

  • Label deleted (Needs backport to 8.0)

PA Updated by Philippe Antoine 1 day ago Actions
Copy link
 #7

  • Tracker changed from Security to Bug

This was not a security problem, just a debug assertion that was wrong

JI Updated by Jason Ish 1 day ago Actions
Copy link
 #9

  • Private changed from Yes to No

PA Updated by Philippe Antoine about 22 hours ago Actions
Copy link
 #10

  • Status changed from In Review to Resolved

PA Updated by Philippe Antoine about 1 hour ago Actions
Copy link
 #11

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom