Project

General

Profile

Actions
Copy link

Bug #6585

closed

SCTIME_FROM_TIMESPEC() creates incorrect timestamps

Added by Stephen Donnelly 11 months ago. Updated 8 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Stephen Donnelly
Target version:
8.0.0-beta1
Affected Versions:
7.0.1
Effort:
low
Difficulty:
low
Label:
Beginner, C

Description

The macro SCTIME_FROM_TIMESPEC(ts) converts nanoseconds to microseconds by multiplying by 1000, when it should divide by 1000.

This will produce garbage SCtime_t values in the microsecond part, which may affect flow tracking behaviour and reporting as it is used to set f->startts.

Subtasks 1 (0 open — 1 closed)

Bug #6595: SCTIME_FROM_TIMESPEC() creates incorrect timestamps (7.0.x backport)ClosedJeff LucovskyActions

Related issues 1 (0 open — 1 closed)

Related to Suricata - Bug #6584: SCTIME_ADD_SECS() macro zeros out ts.usec partClosedStephen DonnellyActions
Actions
Copy link
 #1

Updated by Stephen Donnelly 11 months ago

  • Subject changed from SCTIME_FROM_TIMEVAL() creates incorrect timestamps to SCTIME_FROM_TIMESPEC() creates incorrect timestamps
Actions
Copy link
 #2

Updated by Victor Julien 11 months ago

  • Target version changed from TBD to 7.0.3
Actions
Copy link
 #3

Updated by Victor Julien 11 months ago

  • Related to Bug #6584: SCTIME_ADD_SECS() macro zeros out ts.usec part added
Actions
Copy link
 #4

Updated by Victor Julien 11 months ago

  • Target version changed from 7.0.3 to 8.0.0-beta1
Actions
Copy link
 #5

Updated by OISF Ticketbot 11 months ago

  • Subtask #6595 added
Actions
Copy link
 #6

Updated by OISF Ticketbot 11 months ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link
 #7

Updated by Jeff Lucovsky 11 months ago

  • Status changed from New to Resolved
  • Assignee changed from OISF Dev to Stephen Donnelly
Actions
Copy link
 #8

Updated by Jeff Lucovsky 8 months ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF