[PATCH 3/3] dcerpc: use saturating_add to count fragments
authorPhilippe Antoine <pantoine@oisf.net>
Thu, 8 Jan 2026 13:48:40 +0000 (14:48 +0100)
committerAndreas Dolp <dev@andreas-dolp.de>
Thu, 23 Apr 2026 05:14:21 +0000 (07:14 +0200)
commitb9fc8eab1c0903c215e9c59dd421a6a648fd2678
treec2f9370785a0f6b9a09de7b67e90707922541ab3
parentd66d4200e3a016efe8587c2d88867d4d619052b8
[PATCH 3/3] dcerpc: use saturating_add to count fragments

And do not overflow if we have traffic with more than 65K fragments

(cherry picked from commit a48200b9e5befb1f0aa45ad5b33e2664e6a9fa41)

Origin: upstream, https://github.com/OISF/suricata/commit/c9b80e5affe073ce9d95d0c935a8d67647c83bf7.patch
Bug: https://redmine.openinfosecfoundation.org/issues/8182
Subject: Upstream fix for CVE-2026-22258 part 3

Gbp-Pq: Name CVE-2026-22258_3.patch
rust/src/dcerpc/dcerpc_udp.rs
rust/src/smb/dcerpc.rs