Actions
Feature #6853
openSupport of variables from byte_math / byte_extract in bsize / dsize comparisons
Description
When doing a size comparison with dsize or bsize one might want to reference a variable extracted with byte_math or byte_extract.
An example use case: you have protocol with a size field. Such field you might want to compare with the payload/packet size. Either to ensure it's actually that protocol you are looking for or to detect anomalies indicating something like overflow attacks.
Alternatively having a to having that feature at dsize and bsize an implementation at byte_test to compare against those size values would be equality helpful.
No data to display
Actions