24 lines
594 B
Markdown
24 lines
594 B
Markdown
# 南京环境：ssl decoder解析证书读越界
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OMPUB-1214 | 2024-04-03T15:38:03.000+0800 | 刘学利 | 开放 |
|
||
|
||
|
||
---
|
||
|
||
现场：192.168.12.3
|
||
|
||
现象：ssl decoder在处理流结束时的乱序缓存包，调用openssl解析证书时出现读越界，同时计算ja3时可能存在写越界
|
||
|
||
分析：开启ASAN运行丢包较为严重，导致缺包的tcp会话增加
|
||
|
||
!image-2024-04-03-15-38-11-031.png|width=1640,height=1076!
|
||
|
||
## Attachments
|
||
|
||
**54481/image-2024-04-03-15-38-11-031.png**
|
||
|
||
---
|
||
|