[Bro-Dev] #351: Incorrect bounds checking with truncated TCP options

Bro Tracker bro at tracker.bro-ids.org
Tue May 1 18:29:40 PDT 2012


#351: Incorrect bounds checking with truncated TCP options
----------------------+------------------------
  Reporter:  gregor   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.2
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------
Changes (by seth):

 * milestone:  Bro2.1 => Bro2.2


Comment:

 I think this ticket may bring up much larger issues than it initially
 seems to.  If we focus on analyzing tcp with truncated headers, we should
 probably put a lot more focus on handling connections with only one flow
 or handling content gaps in the analyzers.

 Pushing it back for now.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/351#comment:2>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list