suricata

Commit Graph

Author	SHA1	Message	Date
Juliana Fajardini	8d3de85edd	pgsql: fix u16 overflow in query data_row Found by oss-fuzz with quadfuzz. Cf https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63113 According to PostgreSQL documentation the maximum number of rows can be the maximum of tuples that can fit onto max u32 pages - 4,294,967,295 (cf https://www.postgresql.org/docs/current/limits.html). Some rough calculations for that indicate that this could go over max u32, so updating the data_row data type to u64. Bug #6389	3 years ago
Juliana Fajardini	1afb485dfa	pgsql: remove unused msg field The `ConsolidatedDataRow` struct had a `length` field that wasn't truly used. Related to Bug #6389	3 years ago
Juliana Fajardini	30ac77ce65	pgsql: add cancel request message A CanceldRequest can occur after any query request, and is sent over a new connection, leading to a new flow. It won't take any reply, but, if processed by the backend, will lead to an ErrorResponse. Task #6577	3 years ago
Juliana Fajardini	9aeeac532e	pgsql: remove probe_ts function With the changes in the probing_ts function, this other one could become obsolete. Remove it, and directly call `parser::parse_request` when checking for gaps, instead.	3 years ago
Juliana Fajardini	4f85d06192	pgsql: fix probing functions Some non-pgsql traffic seen by Suricata is mistankenly identified as pgsql, as the probing function is too generic. Now, if the parser sees an unknown message type, even if it looks like pgsql, it will fail. Bug #6080	3 years ago
Juliana Fajardini	1ac5d97259	pgsql: add unknonwn frontend message type We had unkonwn message type for the backend, but not the frontend messages. It's important to better identify those to improve pgsql probing functions. Related to Bug #6080	3 years ago
Philippe Antoine	668501c225	rust: remove unused	3 years ago
Jason Ish	029ac650d7	rust/clippy: fix lint: manual_find These get_tx methods look like ideal candidates for generic and/or derived methods.	4 years ago
Jason Ish	4940dfb3bd	rust/clippy: fix lint: len_without_is_empty	4 years ago
Jason Ish	da12b77f18	rust/clippy: fix lint: new_without_default	4 years ago
Philippe Antoine	bc287018e5	rust: cargo clippy --all-features --fix --allow-no-vcs	4 years ago
Jason Ish	b6cc0e25b1	rust: fix clippy lints for clippy::redundant_static_lifetimes	4 years ago
Jason Ish	5f7ba03e63	rust: fix clippy lints for clippy::needless_bool	4 years ago
Jason Ish	f342d4aacd	rust: fix clippy lints for clippy::len_zero	4 years ago
Jason Ish	29a4a7fddc	rust: fix clippy lints for clippy::assign_op_pattern	4 years ago
Jason Ish	c4034dafa1	rust: fix clippy lints for clippy::derive_partial_eq_without_eq	4 years ago
Victor Julien	79499e4769	app-layer: move files into transactions Update APIs to store files in transactions instead of the per flow state. Goal is to avoid the overhead of matching up files and transactions in cases where there are many of both. Update all protocol implementations to support this. Update file logging logic to account for having files in transactions. Instead of it acting separately on file containers, it is now tied into the transaction logging. Update the filestore keyword to consider a match if filestore output not enabled.	4 years ago
Victor Julien	c27df6304d	app-layer: introduce common AppLayerStateData API Add per state structure for storing flags and other variables.	4 years ago
Philippe Antoine	af40873127	pgsql: config limit maximum number of live transactions As is done for other protocols Ticket: #5527	4 years ago
Jason Ish	9b0b2beac1	pgsql: convert transaction list to vecdeque Allows for more efficient removal from front of the list. Ticket: #5297	4 years ago
Jason Ish	7b11b4d3a1	app-layer: more generic state trait Instead of a method that is required to return a slice of transactions, use 2 methods, one to return the number of transactions in the collection, and another to get a transaction by its index in the collection. This allows for the transaction collection to not be a contiguous array and instead can be a VecDeque, or possibly another collection type that supports retrieval by index. Ticket #5278	4 years ago
Juliana Fajardini	bbd9a2ff1a	pgsql: apply clippy fixes	4 years ago
Juliana Fajardini	0fc9ade7a9	pgsql: fix uint overflow and optimizations Fuzzers found a possible integer overflow bug when parsing response messages. To fix that, removed the case where we incremented the parsed field length and created a new message type for situations where Suri parsers an Unknown message. This is good because there may happen that an unknown message to Suri is valid, and in this case, we would still be able to log it. Philippe Antoine found the bug while fuzzing with rust debug assertions. Bug #5016	4 years ago
Juliana Fajardini	8daa79513a	pgsql: fix clippy is_null usage warning	4 years ago
Pierre Chifflier	ce9efc34c7	rust/pgsql: convert parsers to nom7 functions	5 years ago
Juliana Fajardini	579d7dcc01	pgsql: add initial support - add nom parsers for decoding most messages from StartupPhase and SimpleQuery subprotocols - add unittests - tests/fuzz: add pgsql to confyaml Feature: #4241	5 years ago

26 Commits (8d3de85edda97b0c585253803da3faeccc257942)