Security #5023: smtp: GetLine function buffers data indefinitely if 0x0a was not found int the frag'd input - Suricata - Open Information Security Foundation

Security #5023

Updated by Shivani Bhardwaj over 2 years ago

The code we tend to execute is 

 <pre> 
 ` SCReturnStruct(APP_LAYER_INCOMPLETE(state->consumed, state->input_len + 1)); 
 </pre> 1));` 

 indefinitely.