Project

General

Profile

Actions
Copy link

Bug #5850

closed

frames: Assertion failed: buffer initialized

Added by Philippe Antoine over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
7.0.0-rc2
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found by oss-fuzz:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55542&q=label%3AProj-suricata

Files

Download all files
repro2.pcap (5.32 KB) repro2.pcap Philippe Antoine, 02/03/2023 05:04 PM
repro.rules (296 Bytes) repro.rules Philippe Antoine, 02/03/2023 05:06 PM
Actions
Copy link
 #2

Updated by Philippe Antoine over 1 year ago

./src/suricata -S repro.rules -k none -c suricata.yaml --set stream.midstream=true -r repro2.pcap gets the assertion triggered

Actions
Copy link
 #3

Updated by Philippe Antoine over 1 year ago

Actions
Copy link
 #4

Updated by Philippe Antoine over 1 year ago

alert smb any any -> any any (flow:to_server; frame:smb2.data; content:!"|FE|SMB"; startswith; sid:6;)
alert dcerpc any any -> any any (flow:to_server; dcerpc.iface:367abb81-9844-35f1-ad32-98f038001003; dcerpc.opnum:15; sid:3;)

Actions
Copy link
 #5

Updated by Philippe Antoine over 1 year ago

The first rule make redmine go 500

Actions
Copy link
 #6

Updated by Victor Julien over 1 year ago

  • Status changed from New to In Progress
Actions
Copy link
 #7

Updated by Victor Julien over 1 year ago

  • Status changed from In Progress to Closed
Actions
Copy link

Also available in: Atom PDF