Skip to content

Commit

Permalink
defrag: fix subsequent overlap of start of original (bsd)
Browse files Browse the repository at this point in the history
Fix the BSD policy case where a subsequent fragment starts before an
original fragment and overlaps the beginning of the original
fragment. In this case the overlapping data from the new fragment is
preferred.

Suricata was preferring the data from the original fragment, but it
should only do that when the original fragment has an offset <= to the
new fragment.

- Adds tests for this case

Bug: #6669
(cherry picked from commit f1709ea)
  • Loading branch information
jasonish authored and victorjulien committed Apr 22, 2024
1 parent bf3d420 commit 414f97c
Showing 1 changed file with 610 additions and 286 deletions.

0 comments on commit 414f97c

Please sign in to comment.