Bug #5171: detect/iponly: non-cidr netmask settings can lead incorrect radix tree - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5171

closed

detect/iponly: non-cidr netmask settings can lead incorrect radix tree

Added by Jeff Lucovsky over 2 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Jeff Lucovsky

Target version:

5.0.9

Affected Versions:

Effort:

Difficulty:

Label:

Description

A rule like alert ip any any -> 0.0.0.5/0.0.0.5 any (sid:1;) fails to work properly, hits a DEBUG_VALIDATE_BUG_ON and leaks memory.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Jeff Lucovsky over 2 years ago

Copied from Bug #5168: detect/iponly: non-cidr netmask settings can lead incorrect detection added

Actions

Copy link

Updated by Jeff Lucovsky over 2 years ago

Status changed from Assigned to In Progress

Cherry-pick commit(s)
- a67b97e14c08f46f50c1acd989f0dc049a8e4cba
- 4020e2faa7ee93dfed663b4b0795644572ddfd79
- 259bd8aa92c7bc8ca8c74b3f429f321935493828
- 79b7b7a0ddfdcd7664ca328a41d24fbca75e3e54
- 053b2b3b5b1197064bba5d59d4731c5789ff7239
- 935ea745f5e38b49713ae77d86b57ce7260917a4