Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dcerpc: consume bytes after gap resync #12649

Closed

Conversation

catenacyber
Copy link
Contributor

@catenacyber catenacyber commented Feb 21, 2025

Link to ticket: https://redmine.openinfosecfoundation.org/issues/
https://redmine.openinfosecfoundation.org/issues/7567

Describe changes:

  • dcerpc: consume bytes after gap resync

Ticket: 7567

After a gap, we search a new record that may start later than
the beginning of current stream slice.
If so, consume the first bytes before the start of the record,
so that AppLayerResult::incomplete can be consistent and not
trigger assertion !((res.needed + res.consumed < input_len))
Copy link

codecov bot commented Feb 21, 2025

Codecov Report

Attention: Patch coverage is 66.66667% with 2 lines in your changes missing coverage. Please review.

Project coverage is 80.76%. Comparing base (d61f36c) to head (765be65).
Report is 21 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master   #12649   +/-   ##
=======================================
  Coverage   80.76%   80.76%           
=======================================
  Files         932      932           
  Lines      259381   259383    +2     
=======================================
+ Hits       209484   209488    +4     
+ Misses      49897    49895    -2     
Flag Coverage Δ
fuzzcorpus 57.01% <66.66%> (+<0.01%) ⬆️
livemode 19.36% <0.00%> (-0.01%) ⬇️
pcap 44.15% <33.33%> (-0.01%) ⬇️
suricata-verify 63.50% <50.00%> (+0.02%) ⬆️
unittests 58.34% <16.66%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Copy link
Member

@inashivb inashivb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tests well. LGTM 🚀
Thank you, Philippe! 🙇🏽‍♀️

@inashivb
Copy link
Member

Will need a rebase for clean CI post clippy fixes merge though

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 24857

@victorjulien victorjulien added this to the 8.0 milestone Feb 22, 2025
@victorjulien
Copy link
Member

Merged in #12675, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

4 participants