Victor Julien
870b40220c
rust: cargo update
2 months ago
Philippe Antoine
096ba42ce9
detect/integers: add some meaningful error messages
...
To help rule writers
2 months ago
Philippe Antoine
4f7fc25a1a
detect/dnp3: make dnp3.ind a generic uint16 bitflags keyword
...
Ticket: 6724
Allows operations such as negation
2 months ago
Philippe Antoine
c1917dec21
detect/integers: make mqtt use generic detect_parse_uint_bitflags
...
Ticket: 6724
2 months ago
Philippe Antoine
867f5bfa21
detect/integers: generic detect_parse_uint_bitflags
...
Ticket: 6724
This will ease other keywords with bitflags, by having a generic
function + an association between flag string and bit value.
2 months ago
Philippe Antoine
3641b4eda1
detect/nfs: move nfs_procedure to rust
...
Make it able to use strings on the way
Ticket: 6723
2 months ago
Philippe Antoine
9869fb776b
detect/snmp: pdu_type keyword now accepts strings
...
Ticket: 6723
2 months ago
Philippe Antoine
0553dfa814
detect/krb5: move krb5_msg_type to rust
...
Makes it a generic u32 on the way
Unit tests are covered by SV tests
Ticket: 6723
2 months ago
Philippe Antoine
24503b0ead
rust: move file functions out of SuricataContext
...
Ticket: 7667
2 months ago
Philippe Antoine
1f084f8cb7
rust: move HttpRangeFreeBlock out of SuricataContext
...
Ticket: 7667
2 months ago
Philippe Antoine
828a6bdbf8
rust: bindgen SCLogMessage
...
Ticket: 7667
2 months ago
Philippe Antoine
cc845dccdb
rust: bindgen GenericVarFree
...
Ticket: 7667
2 months ago
Philippe Antoine
b00788af8b
rust: bindgen SCAppLayerParserTriggerRawStreamInspection
...
Ticket: 7667
2 months ago
Philippe Antoine
c52121586a
rust: move AppLayerEvents funcs out of RustContext
...
Ticket: 7667
just use it directly, with bindgen, and cfg not test
2 months ago
Philippe Antoine
bf6b8510fe
rust: move DetectEngineStateFree out of RustContext
...
Ticket: 7667
just use it directly, with bindgen, and cfg not test
2 months ago
Philippe Antoine
573dd2367e
rust: bindgen SCFileFlowFlagsToFlags
...
Ticket: 7667
2 months ago
Philippe Antoine
6fa85d18f0
rust: reenable lint unused_doc_comment
...
With just local exceptions
2 months ago
Philippe Antoine
b59086210f
rust: bindgen flow ffi API
...
Ticket: 7667
2 months ago
Philippe Antoine
bbf1424371
rust: bindgen MpmAddPatternCI
...
Ticket: 7667
2 months ago
Philippe Antoine
c391451f19
rust: begin to bindgen app-layer-register.h
...
Ticket: 7667
2 months ago
Philippe Antoine
95483228d2
detect: list-keywords cli shows integers with bitflags
...
Ticket: 7875
2 months ago
Philippe Antoine
53d9569dfb
detect: list-keywords cli shows integers with enums
...
Ticket: 7875
2 months ago
Philippe Antoine
da486af881
detect: list-keywords cli shows integers
...
Ticket: 7875
2 months ago
Philippe Antoine
68017d3fe1
detect: grow SigTableElmt flags to u32
...
to be later able to store information about keywords being about
integers
2 months ago
Philippe Antoine
b298bce0e7
detect: list-keywords cli shows multi-buffers
...
Ticket: 7571
2 months ago
Philippe Antoine
cb9ab951b9
detect/integers: subslice for multi-integers
2 months ago
Philippe Antoine
82f0e725a2
detect/integers: index or_absent and or_oob
...
To match if array is empty, or index is out of bounds
2 months ago
Philippe Antoine
1480cf47ab
detect/integers: nb index to match a specific number of times
...
For example
dns.rrtype: !A,nb>3
will match if we have more than 3 dns records which are not A
2 months ago
Philippe Antoine
6f848eeaaf
detect/integers: all1 index to match only on non-empty arrays
2 months ago
Philippe Antoine
dd81cfa733
detect/uint: wait for end of progress to match on all
...
As is done for absent keyword for instance
2 months ago
Philippe Antoine
5add185f22
http2/detect: http2.window can now use index
...
Ticket: 7480
2 months ago
Philippe Antoine
83868778b9
http2/detect: http2.priority can now use index
...
Ticket: 7480
2 months ago
Philippe Antoine
9fc407fd75
mqtt/detect: mqtt.type can now use index
...
Ticket: 7480
2 months ago
Philippe Antoine
c0988252ba
dns/detect: rrtype can now use index
...
Ticket: 7480
2 months ago
Philippe Antoine
d8c1f8e7be
rust/detect: generic detect_uint_match_at_index
...
and make ldap use it
Ticket: 7480
No behavior change, just code restyling
2 months ago
Philippe Antoine
7effcb7835
rust/ldap: use Vec instead of Vecdeque
...
as we do not pop
Ticket: 7480
May have a behavior change, but only in terms of performance
2 months ago
Philippe Antoine
f555f02ed4
rust/detect: generic detect_parse_array_uint_enum
...
And make ldap use it
Ticket: 7480
No behavior change, just code restyling
2 months ago
Philippe Antoine
c6d3857793
rust/detect: create generic DetectUintArrayData
...
And make ldap use them
Ticket: 7480
No behavior change, just code restyling
2 months ago
Philippe Antoine
e01d19889e
rust/detect: move DetectUintIndex definition to generic file
...
Ticket: 7480
No behavior change, just code restyling
2 months ago
Philippe Antoine
ef6ce7d701
detect: rename LdapIndex to something generic
...
to be able to use it outside of ldap
Ticket: 7480
No behavior change, just code restyling
2 months ago
Philippe Antoine
2ed7a85356
rust: rustfmt detect uint
2 months ago
Alice Akaki
8e0b0ef35f
detect: add email.body_md5 keyword
...
email.body_md5 matches on md5 hash generated from email body
This keyword maps to the EVE field email.body_md5
It is a sticky buffer
Supports prefiltering
Ticket: #7587
2 months ago
Alice Akaki
6c88cc1e0c
detect/mime: fix detect mime nits
...
Return 0 if .to_str() fails in functions
SCDetectMimeEmailGetData and SCDetectMimeEmailGetDataArray
Fixes:
431822c ("detect: add email.from")
96e461f ("detect: add email.received keyword")
2 months ago
Alice Akaki
4f1cc19f25
mime/smtp: Change md5_result type from GenericArray<u8, U16> to String
2 months ago
Victor Julien
96ae693b44
version: start work on 9.0.0
2 months ago
Shivani Bhardwaj
0d65d35c92
version: start development towards 8.0.2
2 months ago
Jason Ish
2444feed0d
release: 8.0.1; update changelog
2 months ago
Jason Ish
6d74656bef
rust: respect RUSTC and CARGO env vars like CC
...
To support alternative cargo and rustc programs (such as cargo-1.82),
respect CARGO and RUSTC environment variables during ./configure much
like CC.
RUSTFMT is also respected as that is required for the tests, and Cargo
can't figure this out like it can for rustc (perhaps a bug in the
packaging).
For cbindgen, we have also have to make sure the cargo environment
variable is set for each invocation.
To build with Ubuntu's Rust 1.82 packaging:
CARGO=cargo-1.82 RUSTC=rustc-1.82 RUSTDOC=rustdoc-1.82 \
./configure
Note that setting RUSTDOC is only required for commands like "make
check" to pass.
Ticket: #7877
2 months ago
Jason Ish
db945aec83
rust: bindgen requires rustfmt
...
Bindgen will use rustfmt after generating the bindings, but this will
fail if rustfmt is not installed. Only run bindgen if rustfmt is
installed.
2 months ago
Jason Ish
4d4198dccc
rust: update tracing-subscriber
...
Address https://rustsec.org/advisories/RUSTSEC-2025-0055 .
3 months ago