You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust
Philippe Antoine 2d5172aaf3 http2: bound number of http2 frames per tx
Ticket: 8289

If stream.reassembly.depth is unlimited,
an attacker controlling the 2 sides of a communication going through Suricata
can send a transition with an infinite number of headers, until suricata OOMs

Solution is to offer a configuration option to bound the number
of HTTP2 frames we store in a HTTP2 transaction, and produce an
anomaly if this bound is crossed

(cherry picked from commit 784e173278)
1 month ago
..
.cargo rust: rename .cargo/config to .cargo/config.toml 2 years ago
derive rust/derive: fix clippy collapsible_match warning 11 months ago
htp rust/htp: formatting fixup 3 months ago
src http2: bound number of http2 frames per tx 1 month ago
suricatactl rust: allow some lints in suricatactl and suricatasc 11 months ago
suricatasc datajson: introduce feature 10 months ago
sys misc: time unit parsing function 1 month ago
.gitignore rust: rename .cargo/config to .cargo/config.toml 2 years ago
Cargo.lock.in misc: time unit parsing function 1 month ago
Cargo.toml.in misc: time unit parsing function 1 month ago
Makefile.am rust: respect RUSTC and CARGO env vars like CC 8 months ago
cbindgen.toml rust: remove unnecessary cbindgen exclusions 10 months ago
rustfmt.toml