aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix broken pattern len compilation causing certain patterns to no match when they should.

Browse Source
remotes/origin/master-1.0.x
Victor Julien 17 years ago
parent 0ab9adabd4
commit 18441c2be7
3 changed files with 69 additions and 64 deletions
Show Stats Download Patch File Download Diff File

28
src/util-mpm-b2g.c
Unescape Escape View File

@ -375,12 +375,12 @@ static inline int B2gAddPattern(MpmCtx *mpm_ctx, uint8_t *pat, uint16_t patlen,
if (scan) { /* SCAN */
if (mpm_ctx->scan_maxlen < patlen) mpm_ctx->scan_maxlen = patlen;
if (mpm_ctx->pattern_cnt == 1) mpm_ctx->scan_minlen = patlen;
if (mpm_ctx->scan_minlen == 0) mpm_ctx->scan_minlen = patlen;
else if (mpm_ctx->scan_minlen > patlen) mpm_ctx->scan_minlen = patlen;
p->flags |= B2G_SCAN;
} else { /* SEARCH */
if (mpm_ctx->search_maxlen < patlen) mpm_ctx->search_maxlen = patlen;
if (mpm_ctx->pattern_cnt == 1) mpm_ctx->search_minlen = patlen;
if (mpm_ctx->search_minlen == 0) mpm_ctx->search_minlen = patlen;
else if (mpm_ctx->search_minlen > patlen) mpm_ctx->search_minlen = patlen;
}
} else {
@ -846,6 +846,7 @@ int B2gPreparePatterns(MpmCtx *mpm_ctx) {
B2gBuildScanMatchArray(mpm_ctx);
B2gBuildSearchMatchArray(mpm_ctx);
SCLogDebug("ctx->scan_1_pat_cnt %"PRIu16"", ctx->scan_1_pat_cnt);
if (ctx->scan_1_pat_cnt) {
ctx->Scan = B2gScan1;
#ifdef B2G_SCAN2
@ -1457,6 +1458,8 @@ uint32_t B2gScan2(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQ
#endif
uint32_t B2gScan1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQueue *pmq, uint8_t *buf, uint16_t buflen) {
SCEnter();
B2gCtx *ctx = (B2gCtx *)mpm_ctx->ctx;
uint8_t *bufmin = buf;
uint8_t *bufend = buf + buflen - 1;
@ -1466,7 +1469,7 @@ uint32_t B2gScan1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQ
B2gHashItem *thi, *hi;
if (buflen == 0)
return 0;
SCReturnUInt(0);
//printf("BUF "); prt(buf,buflen); printf("\n");
@ -1515,10 +1518,12 @@ uint32_t B2gScan1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQ
if (ctx->scan_x_pat_cnt) {
cnt += ctx->MBScan(mpm_ctx, mpm_thread_ctx, pmq, bufmin, buflen);
}
return cnt;
SCReturnUInt(cnt);
}
uint32_t B2gSearchBNDMq(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQueue *pmq, uint8_t *buf, uint16_t buflen) {
SCEnter();
B2gCtx *ctx = (B2gCtx *)mpm_ctx->ctx;
#ifdef B2G_COUNTERS
B2gThreadCtx *tctx = (B2gThreadCtx *)mpm_thread_ctx->ctx;
@ -1530,7 +1535,7 @@ uint32_t B2gSearchBNDMq(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMa
COUNT(tctx->search_stat_m_total+=ctx->search_m);
if (buflen < ctx->search_m)
return 0;
SCReturnUInt(0);
while (pos <= (buflen - B2G_Q + 1)) {
uint16_t h = B2G_HASH16(u8_tolower(buf[pos - 1]),u8_tolower(buf[pos]));
@ -1625,7 +1630,7 @@ skip_loop:
COUNT(tctx->search_stat_total_shift += (ctx->search_m - B2G_Q + 1));
pos = pos + ctx->search_m - B2G_Q + 1;
}
return matches;
SCReturnUInt(matches);
}
uint32_t B2gSearch(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQueue *pmq, uint8_t *buf, uint16_t buflen) {
@ -1734,6 +1739,8 @@ skip_loop:
}
uint32_t B2gSearch1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatcherQueue *pmq, uint8_t *buf, uint16_t buflen) {
SCEnter();
B2gCtx *ctx = (B2gCtx *)mpm_ctx->ctx;
uint8_t *bufmin = buf;
uint8_t *bufend = buf + buflen - 1;
@ -1743,11 +1750,8 @@ uint32_t B2gSearch1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatche
B2gHashItem *thi, *hi;
if (buflen == 0)
return 0;
//printf("BUF "); prt(buf,buflen); printf("\n");
SCReturnUInt(0);
if (mpm_ctx->search_minlen == 1) {
while (buf <= bufend) {
uint8_t h = u8_tolower(*buf);
hi = &ctx->search_hash1[h];
@ -1780,7 +1784,7 @@ uint32_t B2gSearch1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatche
}
buf += 1;
}
}
//printf("B2gSearch1: after 1byte cnt %" PRIu32 "\n", cnt);
if (mpm_ctx->search_maxlen > 1) {
/* Pass bufmin on because buf no longer points to the
@ -1788,7 +1792,7 @@ uint32_t B2gSearch1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatche
cnt += ctx->MBSearch(mpm_ctx, mpm_thread_ctx, pmq, bufmin, buflen);
//printf("B2gSearch1: after 2+byte cnt %" PRIu32 "\n", cnt);
}
return cnt;
SCReturnUInt(cnt);
}
/*

7
src/util-mpm-b3g.c
Unescape Escape View File

@ -359,12 +359,12 @@ static inline int B3gAddPattern(MpmCtx *mpm_ctx, uint8_t *pat, uint16_t patlen,
if (scan) { /* SCAN */
if (mpm_ctx->scan_maxlen < patlen) mpm_ctx->scan_maxlen = patlen;
if (mpm_ctx->pattern_cnt == 1) mpm_ctx->scan_minlen = patlen;
if (mpm_ctx->scan_minlen == 0) mpm_ctx->scan_minlen = patlen;
else if (mpm_ctx->scan_minlen > patlen) mpm_ctx->scan_minlen = patlen;
p->flags |= B3G_SCAN;
} else { /* SEARCH */
if (mpm_ctx->search_maxlen < patlen) mpm_ctx->search_maxlen = patlen;
if (mpm_ctx->pattern_cnt == 1) mpm_ctx->search_minlen = patlen;
if (mpm_ctx->search_minlen == 0) mpm_ctx->search_minlen = patlen;
else if (mpm_ctx->search_minlen > patlen) mpm_ctx->search_minlen = patlen;
}
} else {
@ -1930,7 +1930,6 @@ uint32_t B3gSearch1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatche
//printf("BUF "); prt(buf,buflen); printf("\n");
if (mpm_ctx->search_minlen == 1) {
while (buf <= bufend) {
uint8_t h = u8_tolower(*buf);
hi = &ctx->search_hash1[h];
@ -1963,7 +1962,7 @@ uint32_t B3gSearch1(MpmCtx *mpm_ctx, MpmThreadCtx *mpm_thread_ctx, PatternMatche
}
buf += 1;
}
}
//printf("B3gSearch1: after 1byte cnt %" PRIu32 "\n", cnt);
if (ctx->search_2_pat_cnt) {
/* Pass bufmin on because buf no longer points to the

6
src/util-mpm-wumanber.c
Unescape Escape View File

@ -21,6 +21,7 @@
#include "util-mpm-wumanber.h"
#include "util-unittest.h"
#include "util-debug.h"
#define INIT_HASH_SIZE 65535
@ -428,12 +429,12 @@ static inline int WmAddPattern(MpmCtx *mpm_ctx, uint8_t *pat, uint16_t patlen, u
if (scan) { /* SCAN */
if (mpm_ctx->scan_maxlen < patlen) mpm_ctx->scan_maxlen = patlen;
if (mpm_ctx->pattern_cnt == 1) mpm_ctx->scan_minlen = patlen;
if (mpm_ctx->scan_minlen == 0) mpm_ctx->scan_minlen = patlen;
else if (mpm_ctx->scan_minlen > patlen) mpm_ctx->scan_minlen = patlen;
p->flags |= WUMANBER_SCAN;
} else { /* SEARCH */
if (mpm_ctx->search_maxlen < patlen) mpm_ctx->search_maxlen = patlen;
if (mpm_ctx->pattern_cnt == 1) mpm_ctx->search_minlen = patlen;
if (mpm_ctx->search_minlen == 0) mpm_ctx->search_minlen = patlen;
else if (mpm_ctx->search_minlen > patlen) mpm_ctx->search_minlen = patlen;
}
} else {
@ -985,6 +986,7 @@ int WmPreparePatterns(MpmCtx *mpm_ctx) {
ctx->Search = WmSearch2Hash16;
}
SCLogDebug("mpm_ctx->search_minlen %"PRIu16"", mpm_ctx->search_minlen);
if (mpm_ctx->search_minlen == 1) {
ctx->Search = WmSearch1;
}

Write Preview
Loading…
Cancel
Save