Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge remote-tracking branch 'origin/topic/johanna/gh-4656'

Browse source 
* origin/topic/johanna/gh-4656:
  Fix parsing of EDNS rcode
This commit is contained in:
Tim Wojtulewicz 2025-07-28 14:16:16 -07:00
commit 22fc57a90a
6 changed files with 32 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
CHANGES
View file

@ -1,3 +1,18 @@
8.0.0-dev.768 | 2025-07-28 14:16:16 -0700
* Fix parsing of EDNS rcode (Johanna Amann, Corelight)
The EDNS rcode was incorrectly calculated. The extended rcode is formed
by taking the upper 8 bits of the extended rcode field, plus the lower 4
bits of the existing rcode.
This also adds a new trace with an extended rcode, and a testcase
parsing it.
Reported by dwhitemv25.
Fixes GH-4656
8.0.0-dev.766 | 2025-07-28 14:15:19 -0700
* Expand coverage of IRC analyzer with more commands (Tim Wojtulewicz, Corelight)