dependabot[bot]
23edc35266
github-actions: bump github/codeql-action from 3.30.5 to 4.31.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.5 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.30.5...v4.31.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
1 day ago
Jason Ish
cdd4ea0f11
doc/devguide: document eve callback
...
Document the callback for adding additional data to EVE.
Ticket: #4708
2 days ago
Jason Ish
9fffc09ad7
doc/devguide: document eve file types
...
Ticket: #4708
2 days ago
Philippe Antoine
7447651fa0
output/jsonbuilder: helper function SCJbSetPrintAsciiString
...
To replace C PrintStringsToBuffer and avoid a stack alloc
+ copy
Ticket: 8004
2 days ago
Jason Ish
7e705269e0
requirements.txt: use suricata-update master
...
Master makes sense for Suricata main branch as we are on a ways out on a
release.
2 days ago
Victor Julien
52fd61dffd
lua: remove luajit pushlstring workaround
...
81ee6f5aad ("lua: push correct length back through ScFlowvarGet, work around valgrind warning")
added a workaround for valgrind warnings in pushing a string buffer
into the lua state. This is no longer needed as tested with both
address sanitizer and valgrind.
2 days ago
Li Heng
1106323ae1
rust/sip: delete redundant computing codes
...
Delete call of is_alphanumeric where is_alphanumeric and
is_token_char are called together. Four places are modified.
Ticket: 8003
2 days ago
Victor Julien
0c4a8fd183
doc/userguide: document reject-both expection policy
...
Ticket: #5974 .
2 days ago
Victor Julien
acb769291a
exception-policy: add 'reject-both' option
...
Allow rejecting both sides of a connection. Has the same support
as regular reject (which is essentially rejectsrc).
Ticket: #5974 .
2 days ago
Juliana Fajardini
6b75b937ff
output/eve: fix typos
...
To accompany documentation work done in
Task #4708
2 days ago
Jhonny Sousa
051bc324d6
detect/base64_data: Convert unittests to FAIL/PASS API
...
Ticket: #6320
2 days ago
Jason Ish
1efe70a234
rust/ike: convert to nom 8
...
Ticket: #8050
3 days ago
Jason Ish
f368324e87
rust/mime: convert to nom 8
...
Ticket: #8048
3 days ago
Jason Ish
c5ef615953
rust/mqtt: convert to nom 8
...
Ticket: #8047
3 days ago
Jason Ish
2289069f74
rust/websocket: convert to nom 8
...
Ticket: #8046
3 days ago
Jason Ish
9eeefd0684
rust/bt-dht: convert to nom 8
...
Ticket: #8045
3 days ago
Jason Ish
399f96b07d
rust/rdp: convert to nom 8
...
Ticket: #8044
3 days ago
Jason Ish
7c70f74942
rust/telnet: convert to nom 8
...
Ticket: #8043
3 days ago
Jason Ish
2ff2eb1325
rust/ssh: convert to nom 8
...
Ticket: #8042
3 days ago
Jason Ish
baa22287b8
rust/rfb: convert to nom 8
...
Ticket: #8041
3 days ago
Jason Ish
dcfe247467
rust/pgsql: convert to nom 8
...
Ticket: #8039
3 days ago
Jason Ish
d25286e77a
rust/enip: convert to nom 8
...
Ticket: #8038
3 days ago
Jason Ish
d74f8522ee
rust/tftp: convert to nom 8
...
Ticket: #8037
3 days ago
Jason Ish
4b09622ebc
rust/dhcp: convert to nom 8
...
Ticket: #8036
3 days ago
Philippe Antoine
854201703e
util/var: add NULL check in VarNameStoreRegister
...
And check return value in entropy keyword setup
4 days ago
Philippe Antoine
6d703af505
detect: fix null deref with entropy keyword
...
Ticket: 7959
Usage of entropy with base64_data led to NULL dereference
4 days ago
Jason Ish
65e7e93f88
detect/http2: call correct free function on errors
...
Fix cases where the wrong free function was being called in error
handlers.
DetectHTTP2sizeUpdateSetup was calling DetectHTTP2settingsFree instead
of DetectHTTP2sizeUpdateFree in error case.
Moving http2.priority and http2.window to multi-integers, instead
of basic integers only modified the Free callback, but the
Setup function was still using the direct call to old obsolete free
function.
Using the callback Free abstration in Setup, allows to be
consistent and have less code to change.
4 days ago
Amir Boussejra
56c8db6cb6
flow-timeout: Use yaml config value for CAPTURE_BYPASSED flow
...
Instead of non configurable constant FLOW_BYPASSED_TIMEOUT
Ticket: #8014
4 days ago
Philippe Antoine
772bd9ca53
rust: reduce visibility of detect_parse_uint_notending
...
It is meant as an internal function
Also document the function
4 days ago
Philippe Antoine
b636dffd5b
detect: urilen keyword fails on trailing junk
...
Fails especailly on 1<>2 which looks like a range, but is invalid
as too small, and ended up being accepted as =1
Ticket: 8028
4 days ago
Philippe Antoine
2e9027fd5a
plugins: update SC_API_VERSION to 9
...
So that plugins built for 8 will fail to load with 9 as there
were already breaking changes in the structures and functions
prototypes
4 days ago
Jhonny Sousa
9935af67d6
detect/filestore: Convert unittest to new FAIL/PASS API
...
Ticket: #6317
4 days ago
Jason Ish
16d313cb8b
rust/applayertemplate: convert to nom 8
...
Ticket: #8027
4 days ago
Jason Ish
f0f4d88119
rust/sip+sdp: update to nom 8
...
Done together as there is a dependence of SDP by SIP.
Ticket: #8025
4 days ago
Jason Ish
58564a4b0e
rust/ftp: update to nom 8
...
Ticket: #8026
4 days ago
Jason Ish
54cc97b78e
rust/dns: convert to nom 8.0
...
Ticket: #8024
4 days ago
Jason Ish
16c42da57e
rust: add nom8 as a dependency
...
For the update from nom 7 to nom 8.
4 days ago
Jeff Lucovsky
7e0d6f4a1e
detect/ip.src: Allow use with transforms
...
This commit registers ip.src/ip.dst properly so they can be used with
transforms.
Issue: 8015
4 days ago
Olusegun Fajobi
7455a2c6d7
detect/analyzer: added more details for the ttl keyword
...
Ticket: #6310
4 days ago
Olusegun Fajobi
a16e87beeb
detect-urilen: convert unittests to FAIL/PASS APIs
...
Ticket: #6325
1 week ago
Jhonny Sousa
bdf292b816
rule/vars: convert unittests to new FAIL/PASS API
...
Ticket: #6333
1 week ago
Olusegun Fajobi
52715a00a0
threads: convert unittests for FAIL/PASS APIs
...
Ticket: #6327
1 week ago
Victor Julien
232f0572e0
detect: address intermittent UT crash on OpenBSD
...
Add missing flow memset in test SCSigOrderingTest12 to avoid the crash.
Test SCSigOrderingTest12 : Info: unittest-helper: Sid 1 matched 1 times, as expected [UTHCheckPacketMatchResults:util-unittest-helper.c:638]
Info: unittest-helper: Sid 2 matched 1 times, as expected [UTHCheckPacketMatchResults:util-unittest-helper.c:638]
bash: line 144: 88567 Segmentation fault (core dumped) ./src/suricata -u -l /tmp/
Bug: #8008 .
2 weeks ago
Olusegun Fajobi
66d4595349
ippair-storage: convert unittests to FAIL/PASS APIs
...
Ticket: #6315
2 weeks ago
Jason Ish
0990c9dbf6
rust: pin indexmap
...
Newer indexmap, pulled in by serde_json requires Rust 1.82, so pin
pack to 2.11.4 which still works with Rust 1.75.
2 weeks ago
Jeff Lucovsky
9a7a30f18e
detect/dbv: Assert MT lock held
...
Add a DBV assert to validate that the master->lock is held.
Suppress missing master->lock warning
Issue: 7819
2 weeks ago
Jeff Lucovsky
46a53aee73
engine/mt: Ensure master lock held for reload
...
Issue: 7819
DetectEngineReload must hold the `master->lock`; recent changes changed
the locking usages to avoid deadlock when registering/handling tenants.
These changes added the presumption that the master lock is held at a
higher level. Coverity highlighted that the lock is not held
consistently.
2 weeks ago
David Wharton
9d2d1c4f8f
doc: minor verbiage tweaks and reST fix
2 weeks ago
Philippe Antoine
dc7874b2ac
rust: bindgen more http range functions used in http2
...
Ticket: 7667
2 weeks ago
Philippe Antoine
842352c190
rust: bindgen SCHttpRangeFreeBlock
...
Ticket: 7667
2 weeks ago