Commit Graph

11883 Commits (e99dde0078d6fe15da0e1c7e66c982507e5fa804)
 

Author SHA1 Message Date
Simon Dugas 4336a0e739 dns: log rdata for NULL record type
Logs the rdata for a NULL record type as a printable string.
4 years ago
Jason Ish 858ab07775 github-ci: add sccache to per-commit check
Also use the pre-build cbindgen binary.
Hopefully speeds up the build process.
4 years ago
Victor Julien efc9a7a398 app-layer: remove callback for completion status
Since the completion status was a constant for all parsers, remove the
callback logic and instead register the values themselves. This should
avoid a lot of unnecessary callback calls.

Update all parsers to take advantage of this.
4 years ago
Victor Julien 84385549fe detect: remove unused arg from generic list inspect 4 years ago
Victor Julien d694dac5a8 detect: remove inspect v1 API 4 years ago
Victor Julien 92a8d8b4f4 detect/template: convert to v2 inspect API 4 years ago
Victor Julien 494f8f2700 detect/tls: convert to v2 inspect API 4 years ago
Victor Julien 71a508000b detect/ssh: convert to v2 inspect API 4 years ago
Victor Julien 86686eff17 detect/snmp: convert to v2 inspect API 4 years ago
Victor Julien 962230040a detect/rfb: convert to v2 inspect API 4 years ago
Victor Julien b11cc0fbcd detect/nfs: convert to v2 inspect API 4 years ago
Victor Julien 15c84bf3c6 detect/lua: convert to v2 inspect API 4 years ago
Victor Julien 5062023ffe detect/ftp: convert to v2 inspect API 4 years ago
Victor Julien 2320d62872 detect/mqtt: convert to v2 inspect API 4 years ago
Victor Julien 5611f9ddbd detect/modbus: convert to v2 inspect API 4 years ago
Victor Julien ce6f8605ea detect/enip/cip: convert to v2 inspect API 4 years ago
Victor Julien 35310313de detect/http2: inspect API v2 4 years ago
Victor Julien 67d45f7e3c detect/krb5: use inspect api v2 4 years ago
Victor Julien 197f99a134 detect/ftpbounce: switch to inspect api v2 4 years ago
Victor Julien 0f2c94ffea detect/files: remove unused prototypes 4 years ago
Victor Julien e0e4454db7 detect/files: inspect api v2 4 years ago
Victor Julien 48094b05c8 detect/file: minor cleanup 4 years ago
Victor Julien cd146adef0 detect/dnp3: convert to v2 inspect API 4 years ago
Victor Julien 9f8a8f368a detect/dcerpc: convert to v2 inspect API 4 years ago
Victor Julien db0665bccc detect/dns: convert to v2 inspect API 4 years ago
Victor Julien 8c7423fcb8 detect/app-layer-event: convert to v2 inspect API 4 years ago
Victor Julien c6c93d1d12 detect/stream: convert to inspect API v2 4 years ago
Victor Julien 51f38f6453 detect/payload: minor formatting fixup 4 years ago
Jason Ish 1f1a765132 github-ci: build cbindgen during prep
Instead of building cbindgen in every build, build it once
during prep as a static musl binary to avoid library issues.
4 years ago
Jason Ish f945acf733 github-ci: remove prep directories before upload
Removing the libhtp, suricata-update and suricata-verify directories
before uploading the artifact reduces the upload time from minutes
to seconds.
4 years ago
Jason Ish 42196e932e github-ci: fedora 33 test build (based on fedora 32) 4 years ago
Jason Ish ea36c01a8f github-ci: remove fedora 31 (eol) 4 years ago
Victor Julien 3fdfec860f version: start 7.0.0 development 4 years ago
Victor Julien e860b9eee9 version: set to 6.0.1 4 years ago
Victor Julien 1d84f72a65 changelog: update for 6.0.1 4 years ago
Philippe Antoine 8c4e53e803 dnp3: regenerates C code with script 4 years ago
Philippe Antoine 15980af7de dnp3: avoids DOS by too long loop over null-sized objects 4 years ago
Philippe Antoine 5749024e3f dnp3: fix memory leak with object containing bytearrays 4 years ago
Philippe Antoine 001350547a dnp3: fix signed integer overflow
By using unsigned integers everywhere
4 years ago
Shivani Bhardwaj ea0936199d output: use BASE64_BUFFER_SIZE macro
Base64Encode function requires the maximum length of the output string
as its last parameter. Use the macro BASE64_BUFFER_SIZE to calculate it
correctly.
4 years ago
Shivani Bhardwaj b0a6ed1e2a datasets/string: fix buffer overflow
The size of encoded_data array and the maximum output length parameter
to Base64Encode function were incorrect leading to buffer overflow for
certain cases. The algorithm requires at least 5 bytes of space to even
convert a string of length 1.

Use BASE64_BUFFER_SIZE macro to correctly calculate this output length.
Set size of encoded_data array to the calculated output length.
4 years ago
Shivani Bhardwaj 02942a123a util/crypt: Add macro for max base64encode len
Maximum length of a base64 encoded string can be 33% over the actual
length of the input string. The formula to best cover all the edge cases
is mathematically
(4 * (input_length + 2) / 3) + 1

Add a macro to calculate this for a given input length.
4 years ago
Philippe Antoine 057c4b34c8 ftp: optimize FTPGetOldestTx by starting from last handled tx
Avoids DOS by quadratic complexity algorithm.
Attack is
1 stack many requests/transactions (like cwd commands on a line)
2 get many answers
4 years ago
Philippe Antoine f574663352 http2: files inspection API fixes
uses right transaction id for file tracker
uses FILE_USE_DETECT for good matches with keyword startswith
4 years ago
Philippe Antoine a63ee5adbd http2: allow multiple size updates in one headers batch
cf RFC 7541 section 4.2
4 years ago
Victor Julien a8fc481cd3 http2: avoid null pointer deref in alert output
Bug #4120.
4 years ago
Philippe Antoine 096dce4bba http2: allow filestore to work with HTTP2 4 years ago
Philippe Antoine d5ac77ee8b packet: set length of 0 for too big copy 4 years ago
Philippe Antoine 6d2247391e ssl: improves keyword ssl_version parsing
Removes the use of PCRE for performance
Forbids empty negations after a valid pattern
Forbids mixing negative and positive forms as it is irrelevant
Forbids useless repetition of a version
4 years ago
Philippe Antoine 6181459086 smb: do not rely on one valid NBSS byte for probing
Need to have the SMB header so as to validate
4 years ago