detect/frame: improve assert accuracy

Handle frames of unknown size correctly. Bug: #5226.
3 years ago · 61df4120da
parent c824804e2b
commit 61df4120da
1 changed files with 1 additions and 1 deletions
--- a/src/detect-engine-frame.c
+++ b/src/detect-engine-frame.c
@ -384,7 +384,7 @@ int DetectEngineInspectFrameBufferGeneric(DetectEngineThreadCtx *det_ctx,
    // PrintRawDataFp(stdout, data, data_len);
    // PrintRawDataFp(stdout, data, MIN(64, data_len));
 #endif
-    BUG_ON((int64_t)data_len > frame->len);
+    BUG_ON(frame->len > 0 && (int64_t)data_len > frame->len);

    // TODO don't call if matching needs frame end and DETECT_CI_FLAGS_END not set
    // TODO same for start