From 6462f4671cfafa00290d5658f860962651ab2a0d Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Mon, 21 Dec 2020 22:41:42 +0100 Subject: Fixed invalid TLS check for extra processing detection --- src/lib/ndpi_main.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'src') diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index 302a7fc03..1c41e114b 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -6509,10 +6509,11 @@ u_int8_t ndpi_extra_dissection_possible(struct ndpi_detection_module_struct *ndp switch(proto) { case NDPI_PROTOCOL_TLS: - if((!flow->l4.tcp.tls.certificate_processed) - || (flow->l4.tcp.tls.num_tls_blocks <= ndpi_str->num_tls_blocks_to_follow)) { + if(flow->l4.tcp.tls.certificate_processed) return(0); + + if(flow->l4.tcp.tls.num_tls_blocks <= ndpi_str->num_tls_blocks_to_follow) { // printf("*** %u/%u\n", flow->l4.tcp.tls.num_tls_blocks, ndpi_str->num_tls_blocks_to_follow); - return(1); /* TODO: add check for TLS 1.3 */ + return(1); } break; -- cgit v1.2.3