Philippe Antoine
35b6dcec7e
detect: use generic integer functions for filesize
...
Ticket: #4112
3 years ago
Philippe Antoine
2b0be91f28
detect: use generic integer functions for dsize
...
Ticket: #4112
3 years ago
Philippe Antoine
f29b43defd
detect: rust generic functions for integers
...
Move it away from http2 to generic core crate.
And use it for DCERPC (and SMB)
And remove the C version.
Main change in API is the free function is not free itself, but
a rust wrapper around unbox.
Ticket: #4112
3 years ago
Victor Julien
7e2ed11a11
detect: fix bad BUG_ON pattern
...
cppcheck:
src/detect-engine-uint.c:73:13: warning: Conversion of string literal "unknown mode" to bool always evaluates to true. [incorrectStringBooleanError]
BUG_ON("unknown mode");
^
src/detect-engine-uint.c:328:13: warning: Conversion of string literal "unknown mode" to bool always evaluates to true. [incorrectStringBooleanError]
BUG_ON("unknown mode");
^
src/detect-pcre.c:291:25: warning: Conversion of string literal "Impossible captype" to bool always evaluates to true. [incorrectStringBooleanError]
BUG_ON("Impossible captype");
^
Bug: #5291 .
4 years ago
Philippe Antoine
c9d222a483
detect: allows <> syntax for uint ranges
4 years ago
Philippe Antoine
3f15b2492c
detect: errors for rule with impossible conditions
...
Such as >255 for an uint8 field
4 years ago
Philippe Antoine
3de99a214c
pcre2: migrate keywords parsing
4 years ago
frank honza
b80cdae1df
detect: add comparison-mode LTE/GTE for Detect(U32/u8)Data
5 years ago
Sascha Steinbiss
5dc21b0e09
detect-engine: initialize struct fields
5 years ago
Philippe Antoine
a5572890a9
detect: adds engine for u8 keywords
5 years ago
Jeff Lucovsky
4b0085b03c
detect: Update to take advantage of PCRE refactor
...
This commit changes the keyword detectors to use the refactored PCRE
modifications from detect-parse.[ch]
6 years ago
Philippe Antoine
75ec528384
detect: adds utility file for uint keywords
6 years ago