From 592b294afa99f923595b9cf8d010e8174904f535 Mon Sep 17 00:00:00 2001
From: Victor Julien <vjulien@oisf.net>
Date: Sat, 14 Feb 2026 17:24:38 +0100
Subject: [PATCH] krb5: fix TCP record parsing

A logic error in multi-record parsing meant only the first record was parsed.

Bug: #8278.
(cherry picked from commit 336a9d05cac4327af9e9cdb20e895e99248887af)
---
 rust/src/krb/krb5.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rust/src/krb/krb5.rs b/rust/src/krb/krb5.rs
index 23191f4e80..48d7704874 100644
--- a/rust/src/krb/krb5.rs
+++ b/rust/src/krb/krb5.rs
@@ -522,8 +522,8 @@ unsafe extern "C" fn krb5_parse_request_tcp(
             if state.parse(cur_i, flow, Direction::ToServer) < 0 {
                 return AppLayerResult::err();
             }
-            state.record_ts = 0;
             cur_i = &cur_i[state.record_ts..];
+            state.record_ts = 0;
         } else {
             // more fragments required
             state.defrag_buf_ts.extend_from_slice(cur_i);
@@ -580,8 +580,8 @@ unsafe extern "C" fn krb5_parse_response_tcp(
             if state.parse(cur_i, flow, Direction::ToClient) < 0 {
                 return AppLayerResult::err();
             }
-            state.record_tc = 0;
             cur_i = &cur_i[state.record_tc..];
+            state.record_tc = 0;
         } else {
             // more fragments required
             state.defrag_buf_tc.extend_from_slice(cur_i);