Project

General

Profile

Actions

Bug #6585

closed

SCTIME_FROM_TIMESPEC() creates incorrect timestamps

Added by Stephen Donnelly about 1 year ago. Updated 10 months ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
low
Difficulty:
low
Label:
Beginner, C

Description

The macro SCTIME_FROM_TIMESPEC(ts) converts nanoseconds to microseconds by multiplying by 1000, when it should divide by 1000.

This will produce garbage SCtime_t values in the microsecond part, which may affect flow tracking behaviour and reporting as it is used to set f->startts.


Subtasks 1 (0 open1 closed)

Bug #6595: SCTIME_FROM_TIMESPEC() creates incorrect timestamps (7.0.x backport)ClosedJeff LucovskyActions

Related issues 1 (0 open1 closed)

Related to Suricata - Bug #6584: SCTIME_ADD_SECS() macro zeros out ts.usec partClosedStephen DonnellyActions
Actions #1

Updated by Stephen Donnelly about 1 year ago

  • Subject changed from SCTIME_FROM_TIMEVAL() creates incorrect timestamps to SCTIME_FROM_TIMESPEC() creates incorrect timestamps
Actions #2

Updated by Victor Julien about 1 year ago

  • Target version changed from TBD to 7.0.3
Actions #3

Updated by Victor Julien about 1 year ago

  • Related to Bug #6584: SCTIME_ADD_SECS() macro zeros out ts.usec part added
Actions #4

Updated by Victor Julien about 1 year ago

  • Target version changed from 7.0.3 to 8.0.0-beta1
Actions #5

Updated by OISF Ticketbot about 1 year ago

  • Subtask #6595 added
Actions #6

Updated by OISF Ticketbot about 1 year ago

  • Label deleted (Needs backport to 7.0)
Actions #7

Updated by Jeff Lucovsky about 1 year ago

  • Status changed from New to Resolved
  • Assignee changed from OISF Dev to Stephen Donnelly
Actions #8

Updated by Jeff Lucovsky 10 months ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF