From 8a92945b0639fc1a814c519d9dbbf21f67b91053 Mon Sep 17 00:00:00 2001
From: Arne Welzel <arne.welzel@corelight.com>
Date: Fri, 5 Jul 2024 10:25:25 +0200
Subject: [PATCH] mysql: AuthSwitchRequest: &enforce a 0xfe / 254 status

---
 src/analyzer/protocol/mysql/mysql-protocol.pac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/analyzer/protocol/mysql/mysql-protocol.pac b/src/analyzer/protocol/mysql/mysql-protocol.pac
index 2ea734cd56..7d427460ef 100644
--- a/src/analyzer/protocol/mysql/mysql-protocol.pac
+++ b/src/analyzer/protocol/mysql/mysql-protocol.pac
@@ -524,7 +524,7 @@ type ColumnDefinition41(first_byte: uint8) = record {
 };
 
 type AuthSwitchRequest = record {
-	status: uint8;
+	status: uint8 &enforce(status==254);
 	name  : NUL_String;
 	data  : bytestring &restofdata;
 } &let {