Commit Graph

1818 Commits (c13f85f18d859603c1a9f55f3310310f9c8d19c9)

Author SHA1 Message Date
Juliana Fajardini 62949b3815 pgsql: remove unused "password_message" code
``Password message`` is actually logged just as ``Password``.
Remove related dead code.
6 months ago
Juliana Fajardini 6f81caf8d4 pgsql: clearly indicate redacted password message
If a password message was seen while logging passwords was disabled
for pgsql, this would lead to an empty request being logged.
Instead of simply not logging anything when there is a password message
and this is disabled, however, log instead that said password is
redacted.

Bug #7647
6 months ago
Philippe Antoine fd7bd9c200 src: new file detect-engine-inspect-buffer.h
For InspectionBuffer structure and related functions

Bindgen it for rust, especially transforms

Ticket: 7667
6 months ago
Philippe Antoine df0dc2e8ea rust: bindgen SCDetectSignatureAddTransform
by moving it to detect-engine-buffer.h and prefixing it

Ticket: 7667
6 months ago
Philippe Antoine 1f871cdd64 rust: reuse/reexport suricata_sys DetectEngineThreadCtx
Use the bindgen'd version instead of our own recoded one
6 months ago
Philippe Antoine cf336396c3 rust: bindgen detect-engine-helper.h
Ticket: 7667

Begin by focusing on transforms
6 months ago
Jason Ish 97eaeef7d8 lua: convert SMTP functions to lib: suricata.smtp
Ticket: #7606
7 months ago
Philippe Antoine 06ad72e83e quic: ja3 getter function uses direction
so that future lua code can specify a direction
7 months ago
Jason Ish bf427c69cd rust: remaining rs_ to SC conversions 7 months ago
Jason Ish d16c014641 rust/x509: replace rs_ naming with SC 7 months ago
Jason Ish afce53c8b7 rust/websocket: replace rs_ naming with SC 7 months ago
Jason Ish 7321d7c7db rust/applayertemplate: replace rs_ naming with SC 7 months ago
Jason Ish 2c98ee73ce rust/rfb: replace rs_ naming with SC 7 months ago
Jason Ish e74b4177ac rust/nfs: rust format 7 months ago
Jason Ish 8c1bd60ab1 rust/nfs: replace rs_ naming with SC 7 months ago
Jason Ish 01ce0f92e8 rust/modbus: replace rs_ naming to SC
This was missed in the previous round.
7 months ago
Jason Ish 4e2f1de308 rust/quic: replace rs_ naming with SC 7 months ago
Jason Ish bfa0acf278 rust/ike: replace rs_ naming with SC 7 months ago
Jason Ish 717e06e351 rust/http2: replace rs_ naming with SC 7 months ago
Jason Ish af15986d41 rust/modbus: replace rs_ naming with SC 7 months ago
Jason Ish c994cfb615 rust/sip: replace rs_ naming with SC 7 months ago
Jason Ish 9b830c92dc rust/tftp: replace rs_ naming with SC 7 months ago
Jason Ish aa24276999 rust/telnet: replace rs_ naming with SC 7 months ago
Jason Ish 1c580f9001 rust/detect: replace rs_ naming with SC 7 months ago
Jason Ish 713034d0dd rust/asn1: replace rs_ naming with SC naming 7 months ago
Jason Ish 90116827fe rust/krb: rust format 7 months ago
Jason Ish 8ba0a5c8ec rust/krb: remove rs_ prefix; visibility fixes
- remove pub/no_mangle where not needed
- replace rs_ naming with SC naming
7 months ago
Jason Ish 1f30746e07 rust/dns: rs_ prefix name cleanup 7 months ago
Victor Julien 3c5ce91cbb ftp: per direction tx progress
For request side, having a tx means the request is done.

For response, wait for tx to be marked complete.

Remove unused states.
7 months ago
Philippe Antoine 033e0480cf detect/single-buf: helper with more explicit direction 7 months ago
Philippe Antoine dadf9012fc rust: bindgen detect-engine-buffer.h
Ticket: 7667

And prefix SCDetectBufferSetActiveList to be exported

Allows less use of suricata crate in plugin as we get the functions
prototypes from suricata_sys and they are more correct.
7 months ago
Philippe Antoine 31e30d4aa1 sdp: use rust join
It is much faster as it does not do an allocation for each element
7 months ago
Philippe Antoine 6436a5cebe websocket: limit allocation for small sizes
Fixes: 16f74c68aa ("websocket: use max window bits of 15")

We do not need to allocate 8kbytes for a small message
7 months ago
Philippe Antoine 1f2cb21786 ssh: rustfmt 7 months ago
Philippe Antoine fcac063cfe ssh: make hooks available
Allows signature like `alert ssh:request_banner_done`
7 months ago
Philippe Antoine bbc007b4d4 rust: derive for AppLayerState
To enable easily hooks for rust app-layers such as SSH
7 months ago
Jeff Lucovsky 87b7a0cef6 ftp: Apply rustfmt changes 7 months ago
Jeff Lucovsky 04bf28d6a1 app/ftp: Use common API naming
Modify the Rust API functions to conform to project naming format:
SCFTP*

Issue: 7504
7 months ago
Philippe Antoine 808f8a877a detect/multi-buf: helper with more explicit direction 7 months ago
Philippe Antoine 8ecc3efdc8 detect/multi-buf: harmonize wrapper
Introduce DetectGetMultiData which does the generic wrapping,
including the transforms.

And let each keyword do just the getter.
7 months ago
Philippe Antoine a6392ac5d4 rust: use pure rust helper for registering sticky buffers
Mark sdp and sip keywords with flags SIGMATCH_INFO_STICKY_BUFFER
as a side effect.
7 months ago
Philippe Antoine 833a738dd1 http: fail tx creation if we cannot allocate user data
So, we always have a libhtp.rs htp_tx_t and a Suricata tx
with its AppLayerTxData

Thus AppLayerParserGetTxData cannot return NULL

Ticket: 5739
7 months ago
Philippe Antoine 0167001ce8 rust/htp: remove unused code 7 months ago
Philippe Antoine e728aae1e0 websocket: fixes substraction
Fixes: 16f74c68aa ("websocket: use max window bits of 15")
7 months ago
Philippe Antoine aa7f926ff4 detect: rust helper to register sticky buffer 7 months ago
Philippe Antoine 96afdce283 detect: rename SCSigTableElmt to SCSigTableAppLiteElmt 7 months ago
Philippe Antoine 8757ad5fd3 detect/dns: support string for dns.rrtype
Ticket: 6723
7 months ago
Philippe Antoine 44a6f7f8ca detect/dns: support string for dns.rcode
Ticket: 6723
7 months ago
Philippe Antoine 9814b698c8 detect/dns: move keywords to rust
Ticket: 7529
Ticket: 3725

Adds url for dns.opcode on the way
7 months ago
Philippe Antoine bb9b8d2460 detect: new helper to register multi-buffer with progress
This allows to use these engines for hook rules needing exact
progress (checked in SigValidate)
7 months ago