aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

groups fixed for pcre < 7

Browse Source
remotes/origin/master-1.0.x
William Metcalf 17 years ago committed by Victor Julien
parent be5e5ffa5a
commit 87411594e2
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File

2
src/detect-pcre.c
Unescape Escape View File

@ -11,7 +11,7 @@
#include "detect-mpm.h"
#define PARSE_CAPTURE_REGEX "\\(\\?\\<([A-z0-9_]+)\\>"
#define PARSE_CAPTURE_REGEX "\\(\\?P\\<([A-z0-9_]+)\\>"
#define PARSE_REGEX "(?<!\\\\)/(.*)(?<!\\\\)/([A-z]*)"
static pcre *parse_regex;
static pcre_extra *parse_regex_study;

10
src/detect.c
Unescape Escape View File

@ -752,7 +752,7 @@ int SigTest01 (void) {
SigParsePrepare();
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?<http_uri>.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; recursive; sid:1;)");
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?P<http_uri>.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; recursive; sid:1;)");
if (sig_list == NULL) {
result = 0;
goto end;
@ -967,7 +967,7 @@ int SigTest06 (void) {
SigParsePrepare();
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?<http_uri>.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; recursive; sid:1;)");
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?P<http_uri>.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; recursive; sid:1;)");
if (sig_list == NULL) {
result = 0;
goto end;
@ -1012,7 +1012,7 @@ int SigTest07 (void) {
SigParsePrepare();
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?<http_uri>.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; recursive; sid:1;)");
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?P<http_uri>.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; recursive; sid:1;)");
if (sig_list == NULL) {
result = 0;
goto end;
@ -1059,7 +1059,7 @@ int SigTest08 (void) {
SigParsePrepare();
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?<http_uri>.*) HTTP\\/1\\.0\\r\\n/G\"; sid:1;)");
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?P<http_uri>.*) HTTP\\/1\\.0\\r\\n/G\"; sid:1;)");
if (sig_list == NULL) {
result = 0;
goto end;
@ -1104,7 +1104,7 @@ int SigTest09 (void) {
SigParsePrepare();
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?<http_uri>.*) HTTP\\/1\\.0\\r\\n/G\"; sid:1;)");
sig_list = SigInit("alert tcp any any -> any any (msg:\"HTTP URI cap\"; content:\"GET \"; depth:4; pcre:\"/GET (?P<http_uri>.*) HTTP\\/1\\.0\\r\\n/G\"; sid:1;)");
if (sig_list == NULL) {
result = 0;
goto end;

Write Preview
Loading…
Cancel
Save