Merge remote-tracking branch 'origin/topic/johanna/gh-4547'

* origin/topic/johanna/gh-4547:
  Spicy SSL analyzer: make record layer version parsing more strict
This commit is contained in:
Johanna Amann 2025-06-26 20:21:31 +01:00
commit dbeadc65ba
4 changed files with 13 additions and 5 deletions

11
CHANGES
View file

@ -1,3 +1,14 @@
8.0.0-dev.551 | 2025-06-26 20:21:31 +0100
* Spicy SSL analyzer: make record layer version parsing more strict (Johanna Amann, Corelight)
The Spicy based SSL analyzer was, so far, more permissive with the
record layer versions that it would accept.
This change brings the parsing of record layer versions in line with the
binpac based analyzer. This behavioral difference was discovered due to
a test that changed with the recent dpd log changes.
8.0.0-dev.548 | 2025-06-26 18:49:31 +0200
* extend script coverage profiling to track whether conditionals evaluate to true/false (Vern Paxson, Corelight)