kerberos: fix probing parser tag condition

according to the comment

(cherry picked from commit cb150e97d0)
pull/6099/head
Philippe Antoine 5 years ago committed by Shivani Bhardwaj
parent bef816e03f
commit effa7ac54f

@ -423,7 +423,7 @@ pub extern "C" fn rs_krb5_probing_parser(_flow: *const Flow,
// Kerberos messages start with an APPLICATION header
if hdr.class != BerClass::Application { return unsafe{ALPROTO_FAILED}; }
// Tag number should be <= 30
if hdr.tag.0 >= 30 { return unsafe{ALPROTO_FAILED}; }
if hdr.tag.0 > 30 { return unsafe{ALPROTO_FAILED}; }
// Kerberos messages contain sequences
if rem.is_empty() || rem[0] != 0x30 { return unsafe{ALPROTO_FAILED}; }
// Check kerberos version

Loading…
Cancel
Save