aboutsummaryrefslogtreecommitdiff
path: root/src/lib/protocols
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/protocols')
-rw-r--r--src/lib/protocols/quic.c4
-rw-r--r--src/lib/protocols/ssl.c6
2 files changed, 7 insertions, 3 deletions
diff --git a/src/lib/protocols/quic.c b/src/lib/protocols/quic.c
index d14538e0d..d67414fdf 100644
--- a/src/lib/protocols/quic.c
+++ b/src/lib/protocols/quic.c
@@ -100,8 +100,8 @@ void ndpi_search_quic(struct ndpi_detection_module_struct *ndpi_struct,
&& (packet->payload[i+1] == 'N')
&& (packet->payload[i+2] == 'I')
&& (packet->payload[i+3] == 0)) {
- u_int32_t offset = le32toh(*((u_int32_t*)&packet->payload[i+4]));
- u_int32_t prev_offset = le32toh(*((u_int32_t*)&packet->payload[i-4]));
+ u_int32_t offset = ntohl(*((u_int32_t*)&packet->payload[i+4]));
+ u_int32_t prev_offset = ntohl(*((u_int32_t*)&packet->payload[i-4]));
int len = offset-prev_offset;
int sni_offset = i+prev_offset+1;
diff --git a/src/lib/protocols/ssl.c b/src/lib/protocols/ssl.c
index 947b8371d..f7009a788 100644
--- a/src/lib/protocols/ssl.c
+++ b/src/lib/protocols/ssl.c
@@ -339,6 +339,10 @@ static void stripCertificateTrailer(char *buffer, int buffer_len) {
buffer[i] = '\0', buffer_len = i;
}
}
+
+ /* Now all lowecase */
+ for(i=0; i<buffer_len; i++)
+ buffer[i] = tolower(buffer[i]);
}
/* https://engineering.salesforce.com/tls-fingerprinting-with-ja3-and-ja3s-247362855967 */
@@ -498,7 +502,7 @@ int getSSLcertificate(struct ndpi_detection_module_struct *ndpi_struct,
if(num_found != 2) continue;
}
- if(server_len+i+3 < packet->payload_packet_len) {
+ if((server_len+i+3) < packet->payload_packet_len) {
char *server_name = (char*)&packet->payload[i+4];
u_int8_t begin = 0, len, j, num_dots;