Eric Leblond
85327890f5
suricata: avoid at exit crash in nfq mode
...
When Suricata was build with ebpf support and when it was started
in NFQ mode, it was crashing at exit because it was trying to free
the device extension.
This patch fixes the issue by only trigger the eBPF related code
when Suricata is running in AFP_PACKET mode.
5 years ago
Eric Leblond
e6cfcb704c
storage: fix a variable name
5 years ago
Eric Leblond
628458e7d3
detect: fix link to documentation
5 years ago
Philippe Antoine
43f25f127f
ftp: ftp-data recognized by StringToAppProto
5 years ago
Philippe Antoine
d861228214
http2: decompression for files
...
gzip and brotli decompression for files
5 years ago
Philippe Antoine
2e46b5d100
rust: BIT_U16 macro utility
5 years ago
Philippe Antoine
aee8e60149
rust: better panic message for missing file config
5 years ago
Philippe Antoine
8ac363c34d
rust: fix warning about unused values in smb tests
5 years ago
Philippe Antoine
76db6e34a1
protocol detection: fix failure case
...
as reached by CIFuzz even if unreachable from Suricata
5 years ago
Philippe Antoine
f5d8e953a8
protodetect: debug validation when multiple patterns match
5 years ago
Victor Julien
00d7c9034b
stream: remove debug assert
...
In cases of large windows in the past the check would tigger.
5 years ago
Victor Julien
b66d013294
detect/http_client_body: minor test cleanups
5 years ago
Eric Leblond
64f994f753
dataset: fix dataset string lookup
...
The data was unlocked but the use_cnt was not decreased resulting
in the data entry not being removable.
5 years ago
Victor Julien
191461a028
detect/file_data: cleanup tests
5 years ago
Victor Julien
116c089de0
stream/tests: minor cleanups
5 years ago
Victor Julien
80a3bbef3d
qa/cocci: support FAIL macros in malloc check
5 years ago
Victor Julien
711cfe5657
github: codecov fix path handling
5 years ago
Victor Julien
ee6d792b02
stream: move tests into tests/
5 years ago
Victor Julien
226a82bade
detect/fast_pattern: redo unittests
5 years ago
Victor Julien
66d7f5941a
detect/fast_pattern: remove dead code
5 years ago
Victor Julien
bc9e7743f3
detect/http-ua: cleanup tests
5 years ago
Emmanuel Thompson
f12daa710f
decode/flow/esp: Add ESP decoder & flow
...
- Adds an ESP (Encapsulating Security Payload) header decoder
- Tracks ESP flows via the SPI field
5 years ago
Victor Julien
9adeae07b1
decode: reformat REINIT macro
5 years ago
Victor Julien
3f4398cc90
decode: minor unittest cleanups
5 years ago
Victor Julien
bf00285d0a
proto/names: add SCTP if not defined in system
...
If SCTP is missing from /etc/protocols, add it manually.
5 years ago
Victor Julien
5303901790
github: add codecov.yml
...
Don't report until both cov runs are available to avoid partial
reporting in pull request comments.
5 years ago
Victor Julien
c25afbccc1
json: remove unused jansson wrappers
5 years ago
Victor Julien
b6b317cae6
http: enable and fix content range tests
5 years ago
Victor Julien
a7cd765f20
app-layer/nfs: dead code removal
5 years ago
Juliana Fajardini
97350d9a2c
detect/rpc: clean up unittests
...
- detect-rpc: convert unit tests to new FAIL/PASS API.
- detect-rpc: replace SigInit with DetectEngineAppendSig for more
concise code.
5 years ago
Victor Julien
1e9934cf21
github: add codecov badge
5 years ago
Victor Julien
f0f578444e
ci: initial codecov integration
5 years ago
Eric Leblond
37b1595c20
configure: fix llc detection on recent Debian
...
Where clang --version was returning:
clang version 9.0.1-15+b1
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/bin
Newer version like clang-10 on Debian are returning:
Debian clang version 10.0.1-8+b1
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/bin
As a result the parsing was failing to determine which llc was
available on the system.
5 years ago
Jason Ish
512b0350a0
lua: fix coverity issue with out of scope variable
...
Fix usage of out-of-scope variables. Introduced with the hashing
and adding the guard of g_disable_hashing.
To fix, just remove the guard so all variables are in scope. Hashes
are not initialized here so there is no need for the guard.
5 years ago
Jeff Lucovsky
1c68f4aed6
lua/test: Test cases using SC prefix
...
This commit adds paired test cases to ensure that the SC variant of the
entry points are tested.
5 years ago
Jeff Lucovsky
25e9483168
doc/lua: Lua API name consistency
...
This commit updates the documentation of the SCFlow* function names
available to Lua scripts.
Formerly, they used the prefix "Sc"; now they use "SC".
5 years ago
Jeff Lucovsky
c845974639
general: Correct typo
5 years ago
Jeff Lucovsky
431018d6f7
lua: Use SC prefix for Lua functions
...
This commit adds additional Lua API interfaces to bring consistency to
functions such that the `SC` prefix is available consistently across
flow int and flow var functions.
5 years ago
Victor Julien
3a8ba663a9
email/md5: optimize md5 handling
5 years ago
Jason Ish
547afcb983
doc/userguide/transforms: remove not about libnss being required
5 years ago
Jason Ish
41591af48b
doc/userguide/install: remove libnss
5 years ago
Jason Ish
4695e8e595
travis-ci: don't install libnss
5 years ago
Jason Ish
6299222c4e
email/eve: use Rust function to hash buffer to hex
...
Use SCMd5HashBufferToHex to hash the subject to a hex string.
Removes snprintf loop.
5 years ago
Jason Ish
0a3b9e0220
rust/hashing: add function to finalize md5 to hex string
...
New function, SCMd5FinalizeToHex to finalize an md5 hash
to a hex string.
5 years ago
Jason Ish
3a82153866
ja3: use SCMd5HashBufferToHex to print hash as hex
...
Replace snprintf loop with new function that hashes a single
buffer to an MD5 hex string.
5 years ago
Jason Ish
26c1321668
rust/hashing: function to md5 hash buffer to hex
...
Add function SCMd5HashBufferToHex to hash a single buffer to an
md5 hex string.
5 years ago
Jason Ish
e00d21a5cb
filestore: respect g_disable_hashing
...
If g_disable_hashing is set, behave like libnss wasn't compiled
in.
5 years ago
Jason Ish
4e57b5e665
github-ci: don't install libnss/libnspr packages
5 years ago
Jason Ish
6dfc888966
configure.ac: remove tests for libnspr and libnss
5 years ago
Jason Ish
7525295e63
hashing: remove remaining HAVE_NSS guards
...
For features, we pretend to HAVE_NSS so scripts, external tests
continue to work.
5 years ago