Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 13:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

RDP: add some enforcement to required values based on MS-RDPBCGR docs

Browse source
This commit is contained in:
Tim Wojtulewicz 2023-03-23 15:01:09 -07:00
parent 71f487bd20
commit a9d3245e80
4 changed files with 25 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
testing/btest/scripts/base/protocols/rdp/rdp-invalid-length.zeek Normal file
View file

@ -0,0 +1,8 @@
# Tests a pcap that has a known-invalid length in a RDP_Negotiation_Response
# header, ensuring that it throws a binpac exception and reports a notice to
# analyzer.log. The pcap used is a snippet of a pcap from OSS-Fuzz #57109.
# @TEST-EXEC: zeek -C -b -r $TRACES/rdp/rdp-invalid-length.pcap %INPUT
# @TEST-EXEC: btest-diff analyzer.log
@load base/protocols/rdp