suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	6edf05cdaa	github-actions: add dpdk ids live test script	10 months ago
Victor Julien	ed9ad0048d	github-ci: add af-packet and dpdk codecov builds Adds live tests for DPDK and AF_PACKET, with support for code coverage.	10 months ago
Shivani Bhardwaj	99eaf3943a	util/base64: remove coverity reported dead code New defect(s) Reported-by: Coverity Scan Showing 1 of 1 defect(s) CID 1596621: Control flow issues (DEADCODE) /src/util-base64.c: 238 in DecodeBase64RFC4648() ________________________________________________________________________________________________________ * CID 1596621: Control flow issues (DEADCODE) /src/util-base64.c: 238 in DecodeBase64RFC4648() 232 DEBUG_VALIDATE_BUG_ON(bbidx == B64_BLOCK); 233 234 /* Handle any leftover bytes by adding padding to them as long as they do not 235 * violate the destination buffer size / 236 if (bbidx > 0) { 237 padding = bbidx > 1 ? B64_BLOCK - bbidx : 2; >>> CID 1596621: Control flow issues (DEADCODE) >>> Execution cannot reach the expression "3U" inside this statement: "numDecoded_blk = 3U - ((pad...". 238 uint32_t numDecoded_blk = ASCII_BLOCK - (padding < B64_BLOCK ? padding : ASCII_BLOCK); 239 if (dest_size < decoded_bytes + numDecoded_blk) { 240 SCLogDebug("Destination buffer full"); 241 return BASE64_ECODE_BUF; 242 } 243 /* Decode base-64 block into ascii block and move pointer */ Also, add a comment explaining the padding logic for leftover data. Bug 6985	10 months ago
Victor Julien	fcca5c7514	detect/iprep: update doc about 0 value A value of 0 was already allowed by the rule parser, but didn't actually work. Bug: #6834.	10 months ago
Victor Julien	64dc217f9f	detect/iprep: allow 0 as a reputation value Rules would allow checking against value 0, but internally the value was used to indicate "no value". To address this, the internals now return negative values for not found. This way value 0 can be fully supported. Bug: #6834.	10 months ago
Victor Julien	673d27c861	detect/iprep: minor code cleanups	10 months ago
Philippe Antoine	c53e9ac0dd	sdp: fix logging medias As introduced by `bff790b6ac` Also handles errors in the caller Ticket: 6994	10 months ago
Jason Ish	df8568ee30	rust/dns: visibility cleanups Remove pub from functions that don't require it.	10 months ago
Jason Ish	556cfe56bf	rust/dns: ffi naming and visibility cleanups - Remove no_mangle and pub from FFI functions that are only accessed with a function pointer. - Rename all no_mangle FFI functions to our C naming scheme.	10 months ago
Jason Ish	4fedba1140	github-ci: remove cocci from fedora 39 build Cocci on Fedora 39+ gets stuck for some reason. Cocci has been moved to a new Ubuntu 24.04 build.	10 months ago
Jason Ish	1c2402f5e7	github-ci: add ubuntu 24.04 build with cocci Rather basic 24.04 build for now, but use Cocci as Cocci is working properly here, but not working in the latest Fedora releases.	10 months ago
jason taylor	aa919f8081	doc: update flowbits information Ticket: #6991 Signed-off-by: jason taylor <jtfas90@gmail.com>	10 months ago
Philippe Antoine	47a1502dbb	ci: fix macos build use brew instead of pip limit the number of jobs for make set a prefix where we can install use brew flags for library finding	10 months ago
Victor Julien	86a363b1bc	decode/tcp: improve pointer hygene Avoid NULL pointer calculations.	10 months ago
Victor Julien	0dfa5793db	decode/icmpv4: rename ICMPV4_GET_EMB_IPV4 to PacketGetICMPv4EmbIPv4 Follows function nameing style. Ticket: #5517.	10 months ago
Victor Julien	6e23419665	decode/icmpv6: store embedded ip6h ptr as offset Reduces direct pointer usage and reduces Packet size. Ticket: #6938.	10 months ago
Victor Julien	f2288ee39b	decode/icmpv4: store embedded ip4h ptr as offset Reduces direct pointer usage and reduces Packet size. Ticket: #6938.	10 months ago
Victor Julien	d89d4ceb3c	decode/icmpv4: put embedded pointer first Reduce gaps in the structure. Ticket: #6938.	10 months ago
Victor Julien	13281109e3	decode/tcp: reduce TCPVars by turning bools into bitfields To reduce Packet size and make similar fields follow the same pattern. Ticket: #6938.	10 months ago
Victor Julien	8698610b4a	af-packet: fix eBPF/XDP compilation	10 months ago
Victor Julien	68804b8c4b	decode/tcp: move tcph into L4 packet data To reduce Packet size. Ticket: #6938.	10 months ago
Victor Julien	28ac86096a	decode/udp: move udph into L4 packet data To recude Packet size. Ticket: #6938.	10 months ago
Victor Julien	54362d44db	decode/ethernet: move ethh into L2 section L2 section similar to L3 and L4 sections. Ticket: #6938.	10 months ago
Victor Julien	b2f7d3604b	decode/pppoe: localize pppoedh pointer Remove from Packet struct as there were no users of it. Ticket: #6938.	10 months ago
Victor Julien	b4ef910aff	decode/pppoe: localize pppoesh header pointer Remove header pointer from Packet as there were no users of it. Ticket: #6938.	10 months ago
Victor Julien	852ff83d70	decode/icmpv4: move icmpv4h into L4 packet data To reduce Packet size. Ticket: #6938.	10 months ago
Victor Julien	b959d1dba8	decode/icmpv6: move icmpv6h into L4 packet data Also start vars section in L4 for icmpv6vars. To reduce Packet size. Ticket: #6938.	10 months ago
Victor Julien	30ae13f2c3	decode/esp: move esph into L4 packet data To reduce Packet size. Ticket: #6938.	10 months ago
Victor Julien	7d04216cad	decode/gre: move greh into L4 packet data To reduce Packet size. Ticket: #6938.	10 months ago
Victor Julien	20b8c79259	decode/sctp: move sctph into L4 packet data Reduces Packet size. Ticket: #6938.	10 months ago
Victor Julien	2137bbbf9a	decode/icmpv6: add and use PacketIsICMPv6 inline func For better readability and type checking. Ticket: #5517.	10 months ago
Victor Julien	3a1e60745e	decode/icmpv6: switch ptr checks to PKT_IS_ICMPV6 For better readability and type checking. Ticket: #5517.	10 months ago
Victor Julien	1002068e39	decode/icmpv4: add and use PacketIsICMPv4 inline func For better readability and type checking. Ticket: #5517.	10 months ago
Victor Julien	5c3036bea8	decode/udp: add and use PacketIsUDP inline func Replace PKT_IS_UDP macro with PacketIsUDP inline function. For better readability and type checking. Ticket: #5517.	10 months ago
Victor Julien	cca912e9b3	decode/tcp: add and use PacketIsTCP inline func To prepare future changes to the Packet header pointers. Ticket: #5517.	10 months ago
Victor Julien	329fb2affa	decode: start l4 packet area; convert csum handling	10 months ago
Victor Julien	54b9f344b7	decode/icmpv4: switch ptr checks to PKT_IS_ICMPV4 To prepare future changes to the Packet header pointers. Ticket: #5517.	10 months ago
Victor Julien	c9ef85e620	decode: refactor L3 checkum handling Use a flag to indicate a calculated csum is available. Allows packet reset to just use memset.	10 months ago
Victor Julien	2001ddc583	decode: use macro's instead of direct ptr checks To prepare future changes to the Packet header pointers. Ticket: #5517.	10 months ago
Victor Julien	769b020a55	decode/icmpv6: improve packet vars layout Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	18d49c27ae	decode/icmpv6: remove unused error_ptr field Was only set, never checked. Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	4b492c2ded	decode/icmpv6: remove embedded address storage Only used in tests. For the tests, switch to getting headers from embedded IPv6 header. Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	521c968079	decode/icmpv6: remove unused L4 header pointers from Packet Not used, so no need to keep them. Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	a22047b770	decode/icmpv4: shrink icmpv4 packet vars Remove unused L4 header pointers. Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	9ef5af291b	decode/icmpv4: remove unused Packet members Addresses are pulled from embedded IPv4 header directly. Embeded hlen was unused. Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	1777e0314e	decode/tcp: remove unused macro SET_OPTS is now unused, so remove.	10 months ago
Victor Julien	6b8093d7b8	decode/tcp: reduce size needed for SACK tracking No longer use a pointer, but rather an offset. Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	81c4b10dc8	decode/tcp: minor struct layout optimization Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	7be0678c3a	decode/tcp: reduce size needed for tracking WSCALE Part of effort to make Packet more compact. Ticket: #6938.	10 months ago
Victor Julien	6cab2480e5	decode/tcp: reduce space needed for tracking TFO Part of effort to make Packet more compact. Ticket: #6938.	10 months ago

1 2 3 4 5 ...

15866 Commits (8560564657735a4c22004d51db9775ca2f1d9645) All Branches Search

15866 Commits (8560564657735a4c22004d51db9775ca2f1d9645)

All Branches