[PATCH 3/3] dcerpc: use saturating_add to count fragments
authorPhilippe Antoine <pantoine@oisf.net>
Thu, 8 Jan 2026 13:48:40 +0000 (14:48 +0100)
committerAndreas Dolp <dev@andreas-dolp.de>
Sun, 22 Feb 2026 12:28:52 +0000 (13:28 +0100)
commit1953a5be39d10da8bfd9991cdc8551427ea2b8fd
tree2cf75aa3981a51073bb2186e21b6e78779eee3c1
parentb689ad92eb7965b4f0a7365a9033588668b6ede4
[PATCH 3/3] dcerpc: use saturating_add to count fragments

And do not overflow if we have traffic with more than 65K fragments

(cherry picked from commit a48200b9e5befb1f0aa45ad5b33e2664e6a9fa41)

Origin: upstream, https://github.com/OISF/suricata/commit/c9b80e5affe073ce9d95d0c935a8d67647c83bf7.patch
Bug: https://redmine.openinfosecfoundation.org/issues/8182
Subject: Upstream fix for CVE-2026-22258 part 3

Gbp-Pq: Name CVE-2026-22258_3.patch
rust/src/dcerpc/dcerpc_udp.rs
rust/src/smb/dcerpc.rs