Fix FINS false positives (#2176)

* Fix FINS false positives * Add rsv (reserved) field check
author: Vladimir Gavrilov <105977161+0xA50C1A1@users.noreply.github.com> 2023-11-27 23:46:14 +0300
committer: GitHub <noreply@github.com> 2023-11-27 21:46:14 +0100
commit: 688a197b85545b056e3afa8338719154ebc865c7 (patch)
tree: 15ee4e130910e3b5f89932a4a6e00d684b54b3ed /src
parent: ebb1bc2f345025108813c2c5e838b3ee80e6ddc4 (diff)
1 files changed, 3 insertions, 1 deletions
diff --git a/src/lib/protocols/fins.c b/src/lib/protocols/fins.c
index 980697e33..8fd16f562 100644
--- a/src/lib/protocols/fins.c
+++ b/src/lib/protocols/fins.c
@@ -82,7 +82,9 @@ static void ndpi_search_fins(struct ndpi_detection_module_struct *ndpi_struct,
       goto not_fins;
     }
     
-    if ((fins->dna > 0x7F) || (fins->sna > 0x7F)) {
+    if ((fins->dna > 0x7F)  || (fins->sna > 0x7F) ||
+        (fins->gct != 0x02) || (fins->rsv != 0)) 
+    {
       goto not_fins;
     }
author	Vladimir Gavrilov <105977161+0xA50C1A1@users.noreply.github.com>	2023-11-27 23:46:14 +0300
committer	GitHub <noreply@github.com>	2023-11-27 21:46:14 +0100
commit	688a197b85545b056e3afa8338719154ebc865c7 (patch)
tree	15ee4e130910e3b5f89932a4a6e00d684b54b3ed /src
parent	ebb1bc2f345025108813c2c5e838b3ee80e6ddc4 (diff)