From 294ff49f6da9482481f0e71fc7076e50c2f8ae04 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Sat, 1 Mar 2014 18:09:20 +0100 Subject: [PATCH] ssh: allow for space characters in the software version Previously the software version would only contain up to the first space. E.g. in SSH-2.0-OpenSSH_4.7p1 Debian-8ubuntu3 It would contain "OpenSSH_4.7p1". This patch changes the behavior to: "OpenSSH_4.7p1 Debian-8ubuntu3" --- src/app-layer-ssh.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/app-layer-ssh.c b/src/app-layer-ssh.c index 291543236f..8205c4709a 100644 --- a/src/app-layer-ssh.c +++ b/src/app-layer-ssh.c @@ -104,9 +104,9 @@ static int SSHParseBanner(SshState *state, SshHeader *header, const uint8_t *inp SCReturnInt(0); } - const uint8_t *sw_end = BasicSearch(line_ptr, line_len, (uint8_t*)" ", 1); + const uint8_t *sw_end = BasicSearch(line_ptr, line_len, (uint8_t*)"\r", 1); if (sw_end == NULL) { - sw_end = BasicSearch(line_ptr, line_len, (uint8_t*)"\r", 1); + sw_end = BasicSearch(line_ptr, line_len, (uint8_t*)"\n", 1); if (sw_end == NULL) { sw_end = line_ptr + line_len; }