Commit Graph

18172 Commits (dependabot/github_actions/github/codeql-action-4.31.2)
 

Author SHA1 Message Date
dependabot[bot] 23edc35266
github-actions: bump github/codeql-action from 3.30.5 to 4.31.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.30.5...v4.31.2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
1 day ago
Jason Ish cdd4ea0f11 doc/devguide: document eve callback
Document the callback for adding additional data to EVE.

Ticket: #4708
2 days ago
Jason Ish 9fffc09ad7 doc/devguide: document eve file types
Ticket: #4708
2 days ago
Philippe Antoine 7447651fa0 output/jsonbuilder: helper function SCJbSetPrintAsciiString
To replace C PrintStringsToBuffer and avoid a stack alloc
+ copy

Ticket: 8004
2 days ago
Jason Ish 7e705269e0 requirements.txt: use suricata-update master
Master makes sense for Suricata main branch as we are on a ways out on a
release.
2 days ago
Victor Julien 52fd61dffd lua: remove luajit pushlstring workaround
81ee6f5aad ("lua: push correct length back through ScFlowvarGet, work around valgrind warning")
added a workaround for valgrind warnings in pushing a string buffer
into the lua state. This is no longer needed as tested with both
address sanitizer and valgrind.
2 days ago
Li Heng 1106323ae1 rust/sip: delete redundant computing codes
Delete call of is_alphanumeric where is_alphanumeric and
is_token_char are called together. Four places are modified.

Ticket: 8003
2 days ago
Victor Julien 0c4a8fd183 doc/userguide: document reject-both expection policy
Ticket: #5974.
2 days ago
Victor Julien acb769291a exception-policy: add 'reject-both' option
Allow rejecting both sides of a connection. Has the same support
as regular reject (which is essentially rejectsrc).

Ticket: #5974.
2 days ago
Juliana Fajardini 6b75b937ff output/eve: fix typos
To accompany documentation work done in

Task #4708
2 days ago
Jhonny Sousa 051bc324d6 detect/base64_data: Convert unittests to FAIL/PASS API
Ticket: #6320
2 days ago
Jason Ish 1efe70a234 rust/ike: convert to nom 8
Ticket: #8050
3 days ago
Jason Ish f368324e87 rust/mime: convert to nom 8
Ticket: #8048
3 days ago
Jason Ish c5ef615953 rust/mqtt: convert to nom 8
Ticket: #8047
3 days ago
Jason Ish 2289069f74 rust/websocket: convert to nom 8
Ticket: #8046
3 days ago
Jason Ish 9eeefd0684 rust/bt-dht: convert to nom 8
Ticket: #8045
3 days ago
Jason Ish 399f96b07d rust/rdp: convert to nom 8
Ticket: #8044
3 days ago
Jason Ish 7c70f74942 rust/telnet: convert to nom 8
Ticket: #8043
3 days ago
Jason Ish 2ff2eb1325 rust/ssh: convert to nom 8
Ticket: #8042
3 days ago
Jason Ish baa22287b8 rust/rfb: convert to nom 8
Ticket: #8041
3 days ago
Jason Ish dcfe247467 rust/pgsql: convert to nom 8
Ticket: #8039
3 days ago
Jason Ish d25286e77a rust/enip: convert to nom 8
Ticket: #8038
3 days ago
Jason Ish d74f8522ee rust/tftp: convert to nom 8
Ticket: #8037
3 days ago
Jason Ish 4b09622ebc rust/dhcp: convert to nom 8
Ticket: #8036
3 days ago
Philippe Antoine 854201703e util/var: add NULL check in VarNameStoreRegister
And check return value in entropy keyword setup
4 days ago
Philippe Antoine 6d703af505 detect: fix null deref with entropy keyword
Ticket: 7959

Usage of entropy with base64_data led to NULL dereference
4 days ago
Jason Ish 65e7e93f88 detect/http2: call correct free function on errors
Fix cases where the wrong free function was being called in error
handlers.

DetectHTTP2sizeUpdateSetup was calling DetectHTTP2settingsFree instead
of DetectHTTP2sizeUpdateFree in error case.

Moving http2.priority and http2.window to multi-integers, instead
of basic integers only modified the Free callback, but the
Setup function was still using the direct call to old obsolete free
function.
Using the callback Free abstration in Setup, allows to be
consistent and have less code to change.
4 days ago
Amir Boussejra 56c8db6cb6 flow-timeout: Use yaml config value for CAPTURE_BYPASSED flow
Instead of non configurable constant FLOW_BYPASSED_TIMEOUT

Ticket: #8014
4 days ago
Philippe Antoine 772bd9ca53 rust: reduce visibility of detect_parse_uint_notending
It is meant as an internal function

Also document the function
4 days ago
Philippe Antoine b636dffd5b detect: urilen keyword fails on trailing junk
Fails especailly on 1<>2 which looks like a range, but is invalid
as too small, and ended up being accepted as =1

Ticket: 8028
4 days ago
Philippe Antoine 2e9027fd5a plugins: update SC_API_VERSION to 9
So that plugins built for 8 will fail to load with 9 as there
were already breaking changes in the structures and functions
prototypes
4 days ago
Jhonny Sousa 9935af67d6 detect/filestore: Convert unittest to new FAIL/PASS API
Ticket: #6317
4 days ago
Jason Ish 16d313cb8b rust/applayertemplate: convert to nom 8
Ticket: #8027
4 days ago
Jason Ish f0f4d88119 rust/sip+sdp: update to nom 8
Done together as there is a dependence of SDP by SIP.

Ticket: #8025
4 days ago
Jason Ish 58564a4b0e rust/ftp: update to nom 8
Ticket: #8026
4 days ago
Jason Ish 54cc97b78e rust/dns: convert to nom 8.0
Ticket: #8024
4 days ago
Jason Ish 16c42da57e rust: add nom8 as a dependency
For the update from nom 7 to nom 8.
4 days ago
Jeff Lucovsky 7e0d6f4a1e detect/ip.src: Allow use with transforms
This commit registers ip.src/ip.dst properly so they can be used with
transforms.

Issue: 8015
4 days ago
Olusegun Fajobi 7455a2c6d7 detect/analyzer: added more details for the ttl keyword
Ticket: #6310
4 days ago
Olusegun Fajobi a16e87beeb detect-urilen: convert unittests to FAIL/PASS APIs
Ticket: #6325
1 week ago
Jhonny Sousa bdf292b816 rule/vars: convert unittests to new FAIL/PASS API
Ticket: #6333
1 week ago
Olusegun Fajobi 52715a00a0 threads: convert unittests for FAIL/PASS APIs
Ticket: #6327
1 week ago
Victor Julien 232f0572e0 detect: address intermittent UT crash on OpenBSD
Add missing flow memset in test SCSigOrderingTest12 to avoid the crash.

Test SCSigOrderingTest12                                          : Info: unittest-helper: Sid 1 matched 1 times, as expected [UTHCheckPacketMatchResults:util-unittest-helper.c:638]
Info: unittest-helper: Sid 2 matched 1 times, as expected [UTHCheckPacketMatchResults:util-unittest-helper.c:638]
bash: line 144: 88567 Segmentation fault      (core dumped) ./src/suricata -u -l /tmp/

Bug: #8008.
2 weeks ago
Olusegun Fajobi 66d4595349 ippair-storage: convert unittests to FAIL/PASS APIs
Ticket: #6315
2 weeks ago
Jason Ish 0990c9dbf6 rust: pin indexmap
Newer indexmap, pulled in by serde_json requires Rust 1.82, so pin
pack to 2.11.4 which still works with Rust 1.75.
2 weeks ago
Jeff Lucovsky 9a7a30f18e detect/dbv: Assert MT lock held
Add a DBV assert to validate that the master->lock is held.

Suppress missing master->lock warning

Issue: 7819
2 weeks ago
Jeff Lucovsky 46a53aee73 engine/mt: Ensure master lock held for reload
Issue: 7819

DetectEngineReload must hold the `master->lock`; recent changes changed
the locking usages to avoid deadlock when registering/handling tenants.
These changes added the presumption that the master lock is held at a
higher level. Coverity highlighted that the lock is not held
consistently.
2 weeks ago
David Wharton 9d2d1c4f8f doc: minor verbiage tweaks and reST fix 2 weeks ago
Philippe Antoine dc7874b2ac rust: bindgen more http range functions used in http2
Ticket: 7667
2 weeks ago
Philippe Antoine 842352c190 rust: bindgen SCHttpRangeFreeBlock
Ticket: 7667
2 weeks ago