app-layer: fix uint overflow in debug assertion

Krb5 can request it needs a 0xFFFFFFFF record (cherry picked from commit 61b5461782)
2 months ago · e922a324a0
parent 4c51a74e2e
commit e922a324a0
1 changed files with 1 additions and 1 deletions
--- a/src/app-layer-parser.c
+++ b/src/app-layer-parser.c
@ -1431,7 +1431,7 @@ int AppLayerParserParse(ThreadVars *tv, AppLayerParserThreadCtx *alp_tctx, Flow
            goto error;
        } else if (res.status > 0) {
            DEBUG_VALIDATE_BUG_ON(res.consumed > input_len);
-            DEBUG_VALIDATE_BUG_ON(res.needed + res.consumed < input_len);
+            DEBUG_VALIDATE_BUG_ON(res.needed < input_len - res.consumed);
            DEBUG_VALIDATE_BUG_ON(res.needed == 0);
            /* incomplete is only supported for TCP */
            DEBUG_VALIDATE_BUG_ON(f->proto != IPPROTO_TCP);