detect: do not upgrade base64 decode when fuzzing

As fuzzing will put a very big value, and then ThreadCtxDoInit will try to allocate it, ending in out of memory
OISF · Jan 18, 2022 · 23fb139 · 23fb139
1 parent ca29d33
commit 23fb139
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/detect-base64-decode.c b/src/detect-base64-decode.c
@@ -233,6 +233,9 @@ static int DetectBase64DecodeSetup(DetectEngineCtx *de_ctx, Signature *s,
         data->bytes = BASE64_DECODE_MAX;
     }
     if (data->bytes > de_ctx->base64_decode_max_len) {
+#ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
+        data->bytes = BASE64_DECODE_MAX;
+#endif
         de_ctx->base64_decode_max_len = data->bytes;
     }