Commit Graph

11 Commits (9afaf14ba4137f535aa6414982fdf488f0f3cce8)

Author SHA1 Message Date
Victor Julien 9afaf14ba4 smtp: use detection file tracking
As SMTP file_data detection uses the file API, the file's inspect
tracker should be considered when pruning files.

This patch sets the FILE_USE_DETECT flag on files tracked by smtp.

It also adds logic to move inspected tracker ahead if detection
doesn't do it, like when no rules are matching or detection engine
is disabled.
10 years ago
Victor Julien 5aee386fa9 smtp: add file_data debug code 10 years ago
Victor Julien 32bf68aef8 smtp: consider file state in file_data inspection limits 10 years ago
Victor Julien e755913b4b mpm: minor fixes and cleanups 10 years ago
Victor Julien dd2afd51f7 file_data smtp: fix minor coverity warning
CID 1298891:  Null pointer dereferences  (REVERSE_INULL)
Null-checking "curr_file" suggests that it may be null, but it has already been dereferenced on all paths leading to the check.
11 years ago
Victor Julien 3163a57577 smtp file_data: fix wrong free 11 years ago
Giuseppe Longo 26ba647d58 filedata: read inspected tracker settings from suricata.yaml 11 years ago
Giuseppe Longo 4b5848616f filedata: implement inspected tracker 11 years ago
Giuseppe Longo 1f52410d0f UT: implement tests for inspection code 11 years ago
Giuseppe Longo 84dc73d9de mpm: implement prefiltering for smtp 11 years ago
Giuseppe Longo f0c54d4764 Detect engine for smtp file_data file_data: inspecting smtp attachments
Create a buffer to store reassembled file chunks,
and inspect the content.
11 years ago