18194 Commits (a84addb771846f6d4d55ec535a4591f58369e49c)

 

All Branches   

Search

Author	SHA1	Message	Date
Philippe Antoine	a84addb771	util/swf: move allocation from stack to heap ... As it can overflow the stack Ticket: 8055	8 months ago
Philippe Antoine	f2b6540c52	htp: bound decompression ... Ticket: 7980 Usage of Vec<u8> instead of Box<u8> gave the ability to callers to grow the buffer (indefinitely) This was regressed in 16fee33368 Additionnaly, use rust WriteZero instead of WouldBlock as a more fitting error when cursor is full, as that error kind is the one tested by callers.	8 months ago
Philippe Antoine	c61f1cb6d0	detect/integers: rename index all1 to all ... And all to all_or_absent Ticket: 7929	8 months ago
Philippe Antoine	eb5a2d646b	detect/vlan: move vlan.id keyword to generic integer ... Ticket: 7929	8 months ago
Li Heng	c141c55bc6	snmp: can be set to detection-only ... Realloc alp_ctx.ctxs when a dynamic alproto is registered and g_alproto_max increases. So dynamic alproto can be treated as real/normal ones. And app-layer switch can be set to any value of no/deteciton-only/yes. Ticket: 8000	8 months ago
Philippe Antoine	439f96dea7	rust: bindgen frames functions ... Ticket: 7667	8 months ago
Philippe Antoine	92c7be1cb6	rust: bindgen SCSRepCatGetByShortname ... Ticket: 7667	8 months ago
Ezra Adeyinka	368ef839de	detect/address: switch tests to FAIL/PASS API ... Ticket: #4023	8 months ago
Shivani Bhardwaj	bb1ed16408	src: check retval of VarNameStoreRegister ... VarNameStoreRegister can return 0 in case of any error conditions. Handle this case in all the users of this function. It is an unlikely event so add branch assistance accordingly. Bug 8054	8 months ago
Shivani Bhardwaj	6b3c21a4e6	detect/xbits: use correct Free fn ... Most call sites use a casula SCFree fn to get rid of the DetectXbitsData in case of an error. However, if a varname is also registered, that must be unregistered too. Fix all the free calls by replacing them with the appropriate DetectXbitFree fn.	8 months ago
Shivani Bhardwaj	13c8724ae0	detect/xbits: remove unneeded cast to check ptr validity	8 months ago
Shivani Bhardwaj	dad883406d	detect/xbits: use calloc to avoid undefined behavior	8 months ago
Shivani Bhardwaj	a23add0194	detect/lua: remove extra NULL check ... The fn DetectLuaFree checks if the pointer (DetectLuaData) passed to it is valid. So, the checks for NULL in the call sites can safely be removed.	8 months ago
Shivani Bhardwaj	71339c459e	detect/flowvar: remove extra NULL check ... The fn DetectFlowvarDataFree checks if the pointer (DetectFlowvarData) passed to it is valid. So, the checks for NULL in the call sites can safely be removed.	8 months ago
Shivani Bhardwaj	7c9fad27fc	detect/flowint: clean up free fn	8 months ago
Shivani Bhardwaj	bc8bf865ae	detect/flowint: remove extra NULL check ... The fn DetectFlowintFree checks if the pointer (DetectFlowintData) passed to it is valid. So, the checks for NULL in the call sites can safely be removed.	8 months ago
Shivani Bhardwaj	59944c7787	detect/flowint: use calloc to avoid undefined behavior	8 months ago
Shivani Bhardwaj	e5994deb23	util/varname: check id before unregister ... In case of an error a varname id is set to 0. Ideally, it shouldn't be found in the hash table lookup but add a check anyway to avoid obtaining the mutex lock and performing the lookup.	8 months ago
Victor Julien	ec65fd430e	exception-policy: rename 'reject-both' to 'rejectboth' ... To align it with the rule action.	8 months ago
Andreas Dolp	fcbae97a1f	python/Makefile.am: fix file permissions of python/suricata/config/defaults.py ... The install command, by default, sets 0755 if -m is not specified, so the file python/suricata/config/defaults.py will be marked as an executable, though it isn't.	8 months ago
dependabot[bot]	5f138891b2	github-actions: bump github/codeql-action from 3.30.5 to 4.31.2 ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.31.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v3.30.5...v4.31.2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
dependabot[bot]	2609860884	github-actions: bump actions/download-artifact from 5.0.0 to 6.0.0 ... Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](634f93cb29...018cc2cf5b) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
dependabot[bot]	a6505395c6	github-actions: bump actions/upload-artifact from 4 to 5 ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	9 months ago
Jason Ish	cdd4ea0f11	doc/devguide: document eve callback ... Document the callback for adding additional data to EVE. Ticket: #4708	9 months ago
Jason Ish	9fffc09ad7	doc/devguide: document eve file types ... Ticket: #4708	9 months ago
Philippe Antoine	7447651fa0	output/jsonbuilder: helper function SCJbSetPrintAsciiString ... To replace C PrintStringsToBuffer and avoid a stack alloc + copy Ticket: 8004	9 months ago
Jason Ish	7e705269e0	requirements.txt: use suricata-update master ... Master makes sense for Suricata main branch as we are on a ways out on a release.	9 months ago
Victor Julien	52fd61dffd	lua: remove luajit pushlstring workaround ... 81ee6f5aad ("lua: push correct length back through ScFlowvarGet, work around valgrind warning") added a workaround for valgrind warnings in pushing a string buffer into the lua state. This is no longer needed as tested with both address sanitizer and valgrind.	9 months ago
Li Heng	1106323ae1	rust/sip: delete redundant computing codes ... Delete call of is_alphanumeric where is_alphanumeric and is_token_char are called together. Four places are modified. Ticket: 8003	9 months ago
Victor Julien	0c4a8fd183	doc/userguide: document reject-both expection policy ... Ticket: #5974.	9 months ago
Victor Julien	acb769291a	exception-policy: add 'reject-both' option ... Allow rejecting both sides of a connection. Has the same support as regular reject (which is essentially rejectsrc). Ticket: #5974.	9 months ago
Juliana Fajardini	6b75b937ff	output/eve: fix typos ... To accompany documentation work done in Task #4708	9 months ago
Jhonny Sousa	051bc324d6	detect/base64_data: Convert unittests to FAIL/PASS API ... Ticket: #6320	9 months ago
Jason Ish	1efe70a234	rust/ike: convert to nom 8 ... Ticket: #8050	9 months ago
Jason Ish	f368324e87	rust/mime: convert to nom 8 ... Ticket: #8048	9 months ago
Jason Ish	c5ef615953	rust/mqtt: convert to nom 8 ... Ticket: #8047	9 months ago
Jason Ish	2289069f74	rust/websocket: convert to nom 8 ... Ticket: #8046	9 months ago
Jason Ish	9eeefd0684	rust/bt-dht: convert to nom 8 ... Ticket: #8045	9 months ago
Jason Ish	399f96b07d	rust/rdp: convert to nom 8 ... Ticket: #8044	9 months ago
Jason Ish	7c70f74942	rust/telnet: convert to nom 8 ... Ticket: #8043	9 months ago
Jason Ish	2ff2eb1325	rust/ssh: convert to nom 8 ... Ticket: #8042	9 months ago
Jason Ish	baa22287b8	rust/rfb: convert to nom 8 ... Ticket: #8041	9 months ago
Jason Ish	dcfe247467	rust/pgsql: convert to nom 8 ... Ticket: #8039	9 months ago
Jason Ish	d25286e77a	rust/enip: convert to nom 8 ... Ticket: #8038	9 months ago
Jason Ish	d74f8522ee	rust/tftp: convert to nom 8 ... Ticket: #8037	9 months ago
Jason Ish	4b09622ebc	rust/dhcp: convert to nom 8 ... Ticket: #8036	9 months ago
Philippe Antoine	854201703e	util/var: add NULL check in VarNameStoreRegister ... And check return value in entropy keyword setup	9 months ago
Philippe Antoine	6d703af505	detect: fix null deref with entropy keyword ... Ticket: 7959 Usage of entropy with base64_data led to NULL dereference	9 months ago
Jason Ish	65e7e93f88	detect/http2: call correct free function on errors ... Fix cases where the wrong free function was being called in error handlers. DetectHTTP2sizeUpdateSetup was calling DetectHTTP2settingsFree instead of DetectHTTP2sizeUpdateFree in error case. Moving http2.priority and http2.window to multi-integers, instead of basic integers only modified the Free callback, but the Setup function was still using the direct call to old obsolete free function. Using the callback Free abstration in Setup, allows to be consistent and have less code to change.	9 months ago
Amir Boussejra	56c8db6cb6	flow-timeout: Use yaml config value for CAPTURE_BYPASSED flow ... Instead of non configurable constant FLOW_BYPASSED_TIMEOUT Ticket: #8014	9 months ago