Commit Graph

13802 Commits (62352ad0305448152f768e681d514433dec76498)
 

Author SHA1 Message Date
Philippe Antoine 62352ad030 src: fix remaining cppclean warnings 2 years ago
Philippe Antoine 1f066cbbe8 unittest: fix unneeded includes as per cppclean
Especially because there is conditional inclusion from a header
2 years ago
Philippe Antoine 662f0ce503 util: fix includes for util-memcmp
u8_tolower is now in suricata-common.h

Fixes commit 19e94e93fa
2 years ago
Philippe Antoine 7cfc45a6f8 ci: adds one build with hyperscan 2 years ago
Philippe Antoine fbccd74f89 ci: adds build with luajit 2 years ago
Philippe Antoine e85f3916e3 src: fix integer warnings
and adds defrag debug validations
2 years ago
Philippe Antoine b5147189ae tls: fix off by one in supported versions extension
Ticket: #5663
2 years ago
Jeff Lucovsky a4239d433a detect/bsize: Validate bsize values after parsing
Issue: 2982

This commit moves bsize validation with respect to content matches to
the post-parse validation stage. This allows bsize to consider all
content-related values, including those that follow the bsize keyword.
2 years ago
Jeff Lucovsky 9d73777a46 bsize/general: Remove unnecessary includes
This commit removes unused/commented out #include lines.
2 years ago
Jeff Lucovsky 8b41754acd add to general: Typo fixup 2 years ago
Jeff Lucovsky 8df6701186 netmap: Fix include file issues 2 years ago
Jeff Lucovsky 197ad51138 doc: Update bsize documentation
This commit updates the bsize documentation

1. Describe what happens when "content" immediately precedes "bsize"
2. Include the operators and
3. Include examples using the operators.
2 years ago
Jeff Lucovsky ecfdc24e08 detect/bsize: Semantic validation of bsize values
This commit adds validation of the bsize value(s) with the available
buffer size. Signatures are flagged if the bsize and buffer size are
incompatible.

Issue: 3682
2 years ago
Jeff Lucovsky 25c0a6ea7c tests/bsize: Test cases with preceding content
This commit adds test cases that validate behavior when "content"
immediately precedes "bsize".
2 years ago
Jeff Lucovsky c91b987732 general: Typo fixup 2 years ago
Jeff Lucovsky 115297c016 detect/content: Use SCCalloc instead of malloc/memset
This commit replaces a SCMalloc/memset with SCCalloc
2 years ago
Jeff Lucovsky 7eb5fb1826 detect/content: Consider distance in validation
Ticket: 2982

This commit validates that the content usage in a rule will not exceed
the dsize value.

Values of distance that cause the right edge to be exceeded are
considered an error and the signature will be rejected.
2 years ago
Shivani Bhardwaj 58e5033a44 util/base64: use padding var for calculations 2 years ago
jason taylor 9dc8fffe05 userguide: update tos keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 1d9b91a987 userguide: update fragoffset keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 7c73144988 userguide: update fragbits information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 4be9793e36 userguide: update geoip information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor e8eba6e4a1 userguide: update id keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor cfd0da133e userguide: update ipv6.hdr keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 150a04b597 userguide: update ipv4.hdr keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 298f59c2ba userguide: update ip_proto keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 6226492976 userguide: update sameip keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor f97ba44339 userguide: update ipopts keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor 9b4e6e5802 userguide: update ttl keyword information
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
Philippe Antoine ce710181f6 doc: update doc for HTTP file.data to server
Ticket: #4144

Completes e587f6792a
2 years ago
Philippe Antoine e1ee401a12 quic: use VecDeque
Ticket: #5637
2 years ago
Victor Julien ca6ce935b5 security: disable setrlimit with asan
Various parts of ASAN will require creation of threads. At least
LSAN reporting and ASAN stack traces require this. Detect if we
run with ASAN and bypass the noproc setting with a warning.

Bug: #5661.
2 years ago
Philippe Antoine 41d529fb24 pcre: configurable paths for PCRE2 for include/lib
Ticket: #5572
2 years ago
Victor Julien 8f0d820218 ssl: add debug validation checks for recent changes
Make sure the assumptions are correct.
2 years ago
Philippe Antoine 3fbcba8ab7 tls: fix buffer overread
Recently introduced by commit 4bab6e24e5

Ticket: #5564
2 years ago
Philippe Antoine 4706083929 detect: avoids memory leak on ja3 signature parsing
If a later keyword enforces a protocol incompatible with ja3
2 years ago
Philippe Antoine c09ca7d171 clean: use SC_MD5_HEX_LEN instead of magic number 32 2 years ago
Philippe Antoine 7823653a30 clean: replace MD5_STRING_LENGTH with more used SC_MD5_HEX_LEN 2 years ago
Philippe Antoine 5a0d07b13f clean: remove useless * sizeof(char) 2 years ago
Philippe Antoine f75d18b077 quic: ja3 code deduplication
As quic transactions are unidirectional, the same function is
used to get ja3 from client or from server.
2 years ago
Philippe Antoine 7cb40a1dfc quic: allow ja3.hash keyword
Ticket: #5624
2 years ago
Philippe Antoine 286bd2a7ed rust: fix cargo clippy --all-features 2 years ago
Philippe Antoine bc287018e5 rust: cargo clippy --all-features --fix --allow-no-vcs 2 years ago
Philippe Antoine ce66c26afc ci: cargo clippy run option
As clippy does not recognize git which is above
2 years ago
Philippe Antoine cd4bf518f3 rust: fix warnings on rustc 1.67.0-nightly
warning: for loop over an `Option`. This is more readably written
as an `if let` statement
2 years ago
Daniel Young aeb0c0e71a detect/parse-port: fix whitespaces bug
Updated by Victor Julien to:
- accept but strip leading whitespaces
- update tests
- cleanup tests
2 years ago
Eric Leblond ea85e2ccf2 detect/filename: fix buffer description 2 years ago
Shivani Bhardwaj 82dba07579 src: remove unneeded header and refs 2 years ago
Haleema Khan df45fc9e97 detect-l3proto: Convert unittests to new FAIL/PASS API
Ticket: #4050
2 years ago
Alice Akaki d46ce170ba detect-icmp-seq: clean-up unittests
Task: #5597
2 years ago