mirror of https://github.com/OISF/suricata
ssh: avoid quadratic complexity from long banner
Ticket: 6799
When we find an overlong banner, we get into the state just
waiting for end of line, and we just want to skip the bytes
until then.
Returning AppLayerResult::incomplete made TCP engine retain
the bytes and grow the buffer that we parsed again and again...
(cherry picked from commit 271ed2008b)
pull/10668/head
parent
d4acd0fb44
commit
f9ef96af30
Loading…
Reference in New Issue