smtp: add tests for issue 7126

Ensure the SMTP applayer parser doesn't generate an error message while parsing the SMTP frames.
OISF · Sep 22, 2024 · 83bda40 · 83bda40
1 parent 8b65014
commit 83bda40
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/tests/bug-7126/README.md b/tests/bug-7126/README.md
@@ -0,0 +1,2 @@
+This test is for bug 7126 and designed to insure the smtp applayer parser
+doesn't generate an error message.
diff --git a/tests/bug-7126/input.pcap b/tests/bug-7126/input.pcap
diff --git a/tests/bug-7126/input.rules b/tests/bug-7126/input.rules
@@ -0,0 +1 @@
+alert ip any any -> any any (msg:"Sample rule"; flow: established, to_server; file_data; content:"no-match"; sid:1;)
diff --git a/tests/bug-7126/test.yaml b/tests/bug-7126/test.yaml
@@ -0,0 +1,13 @@
+requires:
+  min-version: 8
+
+args:
+  - --set logging.outputs.1.file.type=json
+  - -k none
+
+checks:
+  - filter:
+      count: 0
+      filename: suricata.log
+      match:
+        engine.message: "Extra characters following numeric value"