Philippe Antoine
62352ad030
src: fix remaining cppclean warnings
2 years ago
Philippe Antoine
1f066cbbe8
unittest: fix unneeded includes as per cppclean
...
Especially because there is conditional inclusion from a header
2 years ago
Philippe Antoine
662f0ce503
util: fix includes for util-memcmp
...
u8_tolower is now in suricata-common.h
Fixes commit 19e94e93fa
2 years ago
Philippe Antoine
7cfc45a6f8
ci: adds one build with hyperscan
2 years ago
Philippe Antoine
fbccd74f89
ci: adds build with luajit
2 years ago
Philippe Antoine
e85f3916e3
src: fix integer warnings
...
and adds defrag debug validations
2 years ago
Philippe Antoine
b5147189ae
tls: fix off by one in supported versions extension
...
Ticket: #5663
2 years ago
Jeff Lucovsky
a4239d433a
detect/bsize: Validate bsize values after parsing
...
Issue: 2982
This commit moves bsize validation with respect to content matches to
the post-parse validation stage. This allows bsize to consider all
content-related values, including those that follow the bsize keyword.
2 years ago
Jeff Lucovsky
9d73777a46
bsize/general: Remove unnecessary includes
...
This commit removes unused/commented out #include lines.
2 years ago
Jeff Lucovsky
8b41754acd
add to general: Typo fixup
2 years ago
Jeff Lucovsky
8df6701186
netmap: Fix include file issues
2 years ago
Jeff Lucovsky
197ad51138
doc: Update bsize documentation
...
This commit updates the bsize documentation
1. Describe what happens when "content" immediately precedes "bsize"
2. Include the operators and
3. Include examples using the operators.
2 years ago
Jeff Lucovsky
ecfdc24e08
detect/bsize: Semantic validation of bsize values
...
This commit adds validation of the bsize value(s) with the available
buffer size. Signatures are flagged if the bsize and buffer size are
incompatible.
Issue: 3682
2 years ago
Jeff Lucovsky
25c0a6ea7c
tests/bsize: Test cases with preceding content
...
This commit adds test cases that validate behavior when "content"
immediately precedes "bsize".
2 years ago
Jeff Lucovsky
c91b987732
general: Typo fixup
2 years ago
Jeff Lucovsky
115297c016
detect/content: Use SCCalloc instead of malloc/memset
...
This commit replaces a SCMalloc/memset with SCCalloc
2 years ago
Jeff Lucovsky
7eb5fb1826
detect/content: Consider distance in validation
...
Ticket: 2982
This commit validates that the content usage in a rule will not exceed
the dsize value.
Values of distance that cause the right edge to be exceeded are
considered an error and the signature will be rejected.
2 years ago
Shivani Bhardwaj
58e5033a44
util/base64: use padding var for calculations
2 years ago
jason taylor
9dc8fffe05
userguide: update tos keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
1d9b91a987
userguide: update fragoffset keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
7c73144988
userguide: update fragbits information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
4be9793e36
userguide: update geoip information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
e8eba6e4a1
userguide: update id keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
cfd0da133e
userguide: update ipv6.hdr keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
150a04b597
userguide: update ipv4.hdr keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
298f59c2ba
userguide: update ip_proto keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
6226492976
userguide: update sameip keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
f97ba44339
userguide: update ipopts keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
jason taylor
9b4e6e5802
userguide: update ttl keyword information
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago
Philippe Antoine
ce710181f6
doc: update doc for HTTP file.data to server
...
Ticket: #4144
Completes e587f6792a
2 years ago
Philippe Antoine
e1ee401a12
quic: use VecDeque
...
Ticket: #5637
2 years ago
Victor Julien
ca6ce935b5
security: disable setrlimit with asan
...
Various parts of ASAN will require creation of threads. At least
LSAN reporting and ASAN stack traces require this. Detect if we
run with ASAN and bypass the noproc setting with a warning.
Bug: #5661 .
2 years ago
Philippe Antoine
41d529fb24
pcre: configurable paths for PCRE2 for include/lib
...
Ticket: #5572
2 years ago
Victor Julien
8f0d820218
ssl: add debug validation checks for recent changes
...
Make sure the assumptions are correct.
2 years ago
Philippe Antoine
3fbcba8ab7
tls: fix buffer overread
...
Recently introduced by commit 4bab6e24e5
Ticket: #5564
2 years ago
Philippe Antoine
4706083929
detect: avoids memory leak on ja3 signature parsing
...
If a later keyword enforces a protocol incompatible with ja3
2 years ago
Philippe Antoine
c09ca7d171
clean: use SC_MD5_HEX_LEN instead of magic number 32
2 years ago
Philippe Antoine
7823653a30
clean: replace MD5_STRING_LENGTH with more used SC_MD5_HEX_LEN
2 years ago
Philippe Antoine
5a0d07b13f
clean: remove useless * sizeof(char)
2 years ago
Philippe Antoine
f75d18b077
quic: ja3 code deduplication
...
As quic transactions are unidirectional, the same function is
used to get ja3 from client or from server.
2 years ago
Philippe Antoine
7cb40a1dfc
quic: allow ja3.hash keyword
...
Ticket: #5624
2 years ago
Philippe Antoine
286bd2a7ed
rust: fix cargo clippy --all-features
2 years ago
Philippe Antoine
bc287018e5
rust: cargo clippy --all-features --fix --allow-no-vcs
2 years ago
Philippe Antoine
ce66c26afc
ci: cargo clippy run option
...
As clippy does not recognize git which is above
2 years ago
Philippe Antoine
cd4bf518f3
rust: fix warnings on rustc 1.67.0-nightly
...
warning: for loop over an `Option`. This is more readably written
as an `if let` statement
2 years ago
Daniel Young
aeb0c0e71a
detect/parse-port: fix whitespaces bug
...
Updated by Victor Julien to:
- accept but strip leading whitespaces
- update tests
- cleanup tests
2 years ago
Eric Leblond
ea85e2ccf2
detect/filename: fix buffer description
2 years ago
Shivani Bhardwaj
82dba07579
src: remove unneeded header and refs
2 years ago
Haleema Khan
df45fc9e97
detect-l3proto: Convert unittests to new FAIL/PASS API
...
Ticket: #4050
2 years ago
Alice Akaki
d46ce170ba
detect-icmp-seq: clean-up unittests
...
Task: #5597
2 years ago