Skip to content

Http2 decompression fixes 5691 v1#8194

Closed
catenacyber wants to merge 2 commits intoOISF:masterfrom
catenacyber:http2-decompression-fixes-5691-v1
Closed

Http2 decompression fixes 5691 v1#8194
catenacyber wants to merge 2 commits intoOISF:masterfrom
catenacyber:http2-decompression-fixes-5691-v1

Conversation

@catenacyber
Copy link
Contributor

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/5691

Should this ticket be split in 2 ? (for the 2 bugs in the 2 commits)

Describe changes:

  • http2: Handles padding in DATA frames
  • http2: fixes decompression rust structures logic

suricata-verify-pr: 1007
OISF/suricata-verify#1007

It was not enough to set Cursor position to 0,
also its inner Vec should be cleared.

This way, a new input gets written at the beginning of the
Cursor and its inner Vec...

Ticket: OISF#5691
@catenacyber
Copy link
Contributor Author

cc @dcbeckett

@suricata-qa
Copy link

WARNING:

field baseline test %
SURI_TLPW1_stats_chk
.tcp.rst 128237 103901 81.02%

Pipeline 10753

@victorjulien victorjulien mentioned this pull request Nov 22, 2022
@dcbeckett
Copy link

I've tested this PR against further flows and it fixes the issue

@catenacyber
Copy link
Contributor Author

Thanks for the feedback

@victorjulien
Copy link
Member

Merged in #8198, thanks Philippe and thanks @dcbeckett !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants