From e922a324a0f3496df803f0ac466c8b2d17879fe1 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Thu, 5 Mar 2026 21:25:04 +0100 Subject: [PATCH] app-layer: fix uint overflow in debug assertion Krb5 can request it needs a 0xFFFFFFFF record (cherry picked from commit 61b54617821a552838fa14e6bab94a4b795b0ad8) --- src/app-layer-parser.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app-layer-parser.c b/src/app-layer-parser.c index 2b8a59a141..9dd7baeed3 100644 --- a/src/app-layer-parser.c +++ b/src/app-layer-parser.c @@ -1431,7 +1431,7 @@ int AppLayerParserParse(ThreadVars *tv, AppLayerParserThreadCtx *alp_tctx, Flow goto error; } else if (res.status > 0) { DEBUG_VALIDATE_BUG_ON(res.consumed > input_len); - DEBUG_VALIDATE_BUG_ON(res.needed + res.consumed < input_len); + DEBUG_VALIDATE_BUG_ON(res.needed < input_len - res.consumed); DEBUG_VALIDATE_BUG_ON(res.needed == 0); /* incomplete is only supported for TCP */ DEBUG_VALIDATE_BUG_ON(f->proto != IPPROTO_TCP);