diff options
| author | Vladimir Gavrilov <105977161+0xA50C1A1@users.noreply.github.com> | 2023-11-27 23:46:14 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-11-27 21:46:14 +0100 |
| commit | 688a197b85545b056e3afa8338719154ebc865c7 (patch) | |
| tree | 15ee4e130910e3b5f89932a4a6e00d684b54b3ed /src/lib/protocols/fins.c | |
| parent | ebb1bc2f345025108813c2c5e838b3ee80e6ddc4 (diff) | |
Fix FINS false positives (#2176)
* Fix FINS false positives
* Add rsv (reserved) field check
Diffstat (limited to 'src/lib/protocols/fins.c')
| -rw-r--r-- | src/lib/protocols/fins.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/lib/protocols/fins.c b/src/lib/protocols/fins.c index 980697e33..8fd16f562 100644 --- a/src/lib/protocols/fins.c +++ b/src/lib/protocols/fins.c @@ -82,7 +82,9 @@ static void ndpi_search_fins(struct ndpi_detection_module_struct *ndpi_struct, goto not_fins; } - if ((fins->dna > 0x7F) || (fins->sna > 0x7F)) { + if ((fins->dna > 0x7F) || (fins->sna > 0x7F) || + (fins->gct != 0x02) || (fins->rsv != 0)) + { goto not_fins; } |