stream: harden tcp reuse check against RST/FIN

2 years ago · 64fb4066cf
parent 0d1d288544
commit 64fb4066cf
1 changed files with 4 additions and 0 deletions
--- a/src/stream-tcp.c
+++ b/src/stream-tcp.c
@ -5493,6 +5493,10 @@ static inline int StreamTcpValidateChecksum(Packet *p)
 *  \retval bool true/false */
 static int TcpSessionPacketIsStreamStarter(const Packet *p)
 {
+    if (p->tcph->th_flags & (TH_RST | TH_FIN)) {
+        return 0;
+    }
+
    if ((p->tcph->th_flags & (TH_SYN | TH_ACK)) == TH_SYN) {
        SCLogDebug("packet %"PRIu64" is a stream starter: %02x", p->pcap_cnt, p->tcph->th_flags);
        return 1;