1297 Commits (d07e20c0a3e7d021507130fe57f7248f924e519f)

Author	SHA1	Message	Date
Philippe Antoine	14a4c6c696	rust: update brotli decompressor crate ... cf https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59687	1 year ago
Philippe Antoine	9157070907	quic: v2 support per rfc 9369 ... Ticket: #4968	1 year ago
Yatin Kanetkar	b67ff4badf	dhcp: Log Vendor Client Identifier (dhcp option 60) ... * Log vendor client identifier (dhcp option 60) if extended dhcp logging is turned on. This required the `vendor_client_identifier` to be added to the json schema. Validation done using an SV Test * Added `requested_ip` to the json schema as well, since it was missed. My SV test failed without it. Feature #4587	2 years ago
Philippe Antoine	5bdbc1a313	rdp: do not use zero-bit bitflag ... cf https://docs.rs/bitflags/latest/bitflags/#zero-bit-flags As warned by clippy 1.72.0	2 years ago
Philippe Antoine	b235e85c68	rust: fix clippy warnings for version 1.72.0 ... Includes using the right prototype for C SRepCatGetByShortname	2 years ago
Victor Julien	89f1837625	rust: update cargo.lock	2 years ago
Shivani Bhardwaj	8770431986	dcerpc: accept ALTER_CONTEXT as a valid request ... So far, if only the starting request was a DCERPC request, it would be considered DCERPC traffic. Since ALTER_CONTEXT is a valid request type, it should be accepted too. Reported and patch proposed in the following Redmine ticket by InterNALXz. Bug 6191	2 years ago
Victor Julien	389f166d78	file: remove FILE_USE_DETECT flag ... All implementations were converted to use the logic, so the flag itself can be removed.	2 years ago
Shivani Bhardwaj	d4e674b390	rust: fix clippy warnings	2 years ago
Victor Julien	0068b81269	rust: update cargo.lock	2 years ago
Philippe Antoine	60db5e981c	http2: do not append data after closing file ... Ticket: #6211 Completes commit 02dece5db5 Once a http2 stream has end of stream flag, we close the file. If we see new data frames with this stream id, the new_chunk function should ignore them as the file was already closed.	2 years ago
Jeff Lucovsky	690b65ae88	detect/byte_math: Permit var name for bytes value ... Issue: 6145 Modifications to permit a variable name to be used for the byte_math bytes value.	2 years ago
Philippe Antoine	02dece5db5	http2: file tracker is initialized when file is closed ... Ticket: #6130 This avoids quadratic complexity by having http2_range_key_get looking in a growing number of frames	2 years ago
Sascha Steinbiss	1521b77edd	rfb: also set unimplemented auth types	2 years ago
Sascha Steinbiss	1606aca881	rfb: ensure logging of incompletely parsed txs	2 years ago
Sascha Steinbiss	1f8a5874fb	rfb: never return error on unknown traffic ... We only try to parse a small subset of what is possible in RFB. Currently we only understand some standard auth schemes and stop parsing when the server-client handshake is complete. Since in IPS mode returning an error from the parser causes drops that are likely uncalled for, we do not want to return errors when we simply do not understand what happens in the traffic. This addresses Redmine #5912. Bug: #5912.	2 years ago
Sascha Steinbiss	836fff3679	rfb: add myself as contributor	2 years ago
Sascha Steinbiss	bd1fbf392e	rfb: be more strict parsing the version	2 years ago
Philippe Antoine	d40dca5e55	dcerpc: maximum number of live transactions also for UDP ... Ticket: #6129 Avoids that quadratic complexity gets too bad	2 years ago
Jason Ish	68d0d6ca24	rust: fix unit test link error on Rust 1.70 ... Rust 1.70 appears to now link code on both branches of `if cfg!(test)` now causing Rust unit tests to fail as that pattern was used to disable functions only available when linked with the Suricata C code. To work-around this issue, provide two versions of the `new` function, one for unit tests and one when running as an application.	2 years ago
Philippe Antoine	7256ec8a6e	detect/http2: do not escape ':' in header name or value ... for keywords http.request_header and http.response_header Ticket: #5780	2 years ago
Philippe Antoine	4c466ec5f4	rust/pgsql: remove unused/unconstructed enum variants	2 years ago
Philippe Antoine	f2a18e91c4	rust: define AppLayerEventType only in rust ... And detect.h does no longer depend on app-layer-events.h	2 years ago
Philippe Antoine	668501c225	rust: remove unused	2 years ago
Philippe Antoine	7ca43e7e1f	output/snmp: log version from tx ... and not the one from state If a SNMP flow starts with a V2 version transaction, then there is a V3i version transaction, we will now log V3 for the second transaction	2 years ago
Philippe Antoine	0ec0d8de67	output/rfb: remove unused function parameters	2 years ago
Philippe Antoine	24c2702a05	output/mqtt: remove unused function parameters	2 years ago
Philippe Antoine	09d364b32f	output/krb5: remove unused function parameters	2 years ago
Lancer Cheng	abc76e27de	smb: fix data padding logic in writeAndX parser ... Bug: #6008	2 years ago
Lancer Cheng	000eb91078	smb: fix wrong data offset when wct = 12 ... Bug: #6008	2 years ago
Philippe Antoine	6350736882	http2: avoid quadratic complexity in headers ... When adding an element to the dynamic headers table, the oldest ones may get evicted. When multiple elements get evicted, they should get evicted all at once with drain, instead of one by one as there will be a massive move each time. Ticket: #6103	2 years ago
Philippe Antoine	7d3aa91bf4	mqtt: fix quadratic complexity ... get_tx_by_pkt_id loops only over the last transactions in case there is a transaction flood Ticket: #6100	2 years ago
Haleema Khan	8e19906afa	mqtt: rustfmt mqtt.rs	2 years ago
Haleema Khan	e474858e25	mqtt: add mqtt frames ... Adds PDU, Header and Data frame to the MQTT parser. Ticket: 5731	2 years ago
Jason Ish	33827beae5	jsonbuilder: check buffer growth ... Use try_reserve before growing the internal buffer, and the internal state vector. This allows allocation errors to be caught and an error returned instead of just aborting the process. Ticket: #6057	2 years ago
Jason Ish	95cfc2b34f	jsonbuilder: rustfmt ... Some very minor changes to formatting.	2 years ago
Jason Ish	039c27789b	rust: use 2021 edition ... With the MSRV being bumped to 1.62 for 7.0, we can move the edition up to 2021.	2 years ago
Jason Ish	c30fff8bcb	rust/doc: restore comment with code example, but ignore ... Use backticks for proper markdown processing. As Rust code in backticks is compiled, and this is a non-complete example, tag the code sample to be ignored.	2 years ago
Philippe Antoine	5391f0a8a0	detect: http_response_line for HTTP2 ... Ticket: #4067 Synthetized as HTTP/2 <STAT>\r\n	2 years ago
Philippe Antoine	0dca8cc796	detect: http_request_line support for HTTP2 ... Ticket: #4067 Synthetized as <METHOD> <URI> HTTP/2\r\n	2 years ago
Jason Ish	13fe957b7e	rust/doc: wrap some code examples in backticks	2 years ago
Victor Julien	d4c60924f1	rust/doc: fix doc compile issues	2 years ago
Eloy Pérez González	ed91d689f2	krb5: use req_type instead of msg_type to get request type	2 years ago
Eloy Pérez González	a9b7241417	krb5: set msg_type for KRB-ERROR messages to MessageType::KRB_ERROR	2 years ago
Eloy Pérez González	511dbfe171	krb5: add AS-REQ and TGS-REQ transactions ... Fix bug in ticket #4529	2 years ago
Victor Julien	f9276fdf00	rust: spelling fixes ... Thanks to Josh Soref.	2 years ago
Victor Julien	cdd3251982	snmp: fix spelling ... Thanks to Josh Soref.	2 years ago
Victor Julien	ee7ed99b6f	rust: spelling	2 years ago
Victor Julien	d630f0fa34	rust: rustfmt files with recent new tests	2 years ago
Victor Julien	77f1658c2a	rust: fix new clippy warnings	2 years ago