Skip to content

Commit

Permalink
defrag: fix subsequent overlap of start of original (bsd)
Browse files Browse the repository at this point in the history
Fix the BSD policy case where a subsequent fragment starts before an
original fragment and overlaps the beginning of the original
fragment. In this case the overlapping data from the new fragment is
preferred.

Suricata was preferring the data from the original fragment, but it
should only do that when the original fragment has an offset <= to the
new fragment.

- Adds test for this case

Bug: #6669
(cherry picked from commit f1709ea)
  • Loading branch information
jasonish authored and victorjulien committed Apr 22, 2024
1 parent 2f39ba7 commit 1e110d0
Showing 1 changed file with 380 additions and 7 deletions.

0 comments on commit 1e110d0

Please sign in to comment.