mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 07:08:19 +00:00
363b167bd2
The body-lengths of sub-entities, like multipart messages, got counted twice by mistake: once upon the end of the sub-entity and then again upon the end of the top-level entity that contains all sub-entities. The size of just the top-level entity is the correct one to use.
8 lines
480 B
Text
8 lines
480 B
Text
# @TEST-EXEC: zeek -C -r $TRACES/http/multipart-form-data.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff http.log
|
|
|
|
# This test is mainly checking the request_body_len field for correctness.
|
|
# Historical versions of Zeek would mistakenly count the body-lengths of the
|
|
# multipart sub-entities twice: once upon the end of the sub-entity and then
|
|
# again upon the end of the top-level enitity that contains all sub-entities.
|
|
# The size of just the top-level enitity is the correct one to use.
|