From 1f3552bfaeb0dc0732a897de195664b6cc6a893f Mon Sep 17 00:00:00 2001
From: Philippe Antoine <pantoine@oisf.net>
Date: Thu, 27 Mar 2025 14:43:29 +0100
Subject: [PATCH] http: add test about http parser error

---
 tests/http-data-after-09/README.md  |   5 +++++
 tests/http-data-after-09/input.pcap | Bin 0 -> 1285 bytes
 tests/http-data-after-09/test.yaml  |  12 ++++++++++++
 3 files changed, 17 insertions(+)
 create mode 100644 tests/http-data-after-09/README.md
 create mode 100644 tests/http-data-after-09/input.pcap
 create mode 100644 tests/http-data-after-09/test.yaml

diff --git a/tests/http-data-after-09/README.md b/tests/http-data-after-09/README.md
new file mode 100644
index 000000000..2fad1282f
--- /dev/null
+++ b/tests/http-data-after-09/README.md
@@ -0,0 +1,5 @@
+# HTTP data after 0.9
+
+Test that we do not fully error on data after HTTP/0.9
+
+The pcap file is hand crafted
diff --git a/tests/http-data-after-09/input.pcap b/tests/http-data-after-09/input.pcap
new file mode 100644
index 0000000000000000000000000000000000000000..0f035256bc73139acf2272a3704e7b51f9b5e9ff
GIT binary patch
literal 1285
zcmXpxyJ;a40}BHJK-l-(pQh{dFf+ISB|sPkn1Bpd1_lQZa$sX%sAphc1mPR^7y`b_
zh0X@4+raey|34E31|}B!8;s1%Y>bQ?Tptc^*$<Lq0U7`@djkn(GX&hYr(Ugl6KMXN
z4MLb^SE#s}fy{@QeH>`E1<)=Kh5@L%fv&>p?m0m7Z#4)=y#A*F^bFL!Aag-(y-tF8
zP`BO!xfR(wm>WUnCG{~gxC0#q!Y}}JpEF+fNdVnvj_SSu|KJdX#H8dDLnC7oQ!bG4
zOMu1`>wP5WuEyou)P81$Dxf<-7zUuuEkk!Mig_UCW<i__^S(z&NPxbfo}q$?fq{Zk
zVv0ggYGG+=aS2y&YEfBgk(EMTdS+e)NQIsymveqzUTShlW`3TPLUK-iaVjqtFW84O
zfG#4|htPz%TD@9N2I#|AND+Jh7Qqn{m>FV#UISqmfch{3-G?aVNdV3Bfkz0~ywG6R
zAYg<fCK(zT8Yw7MRVgVbRaPn~Sf!bz8Y<)f31hGy%7J#0=!f%QKL}#?!weG4gT#`a
z3^0+NM-CHUc$fn-(g9E^T1=jK7jT((lU(zV{EO^9(TOC7-vwa!$s)TC<X4cH07L*P
ACjbBd

literal 0
HcmV?d00001

diff --git a/tests/http-data-after-09/test.yaml b/tests/http-data-after-09/test.yaml
new file mode 100644
index 000000000..e32df6bd6
--- /dev/null
+++ b/tests/http-data-after-09/test.yaml
@@ -0,0 +1,12 @@
+requires:
+  min-version: 8
+
+args: 
+- -k none
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: stats
+        stats.app_layer.error.http.parser: 0
\ No newline at end of file